# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "proftpd" and "ftp" for normal operation and anon.
ServerType    standalone
DefaultServer    on
MultilineRFC2228   on
UseReverseDNS    off
MaxInstances    30
#IdentLookups    off
RootLogin    off
User     ftp
Group     users
RequireValidShell   off
DefaultAddress    172.23.8.8 192.168.1.1
#SocketBindTight   on
DefaultRoot    ~
  ServerName   "172.23.8.8_ftp"
 ShowSymlinks   on
 RequireValidShell  off
# AuthPAM    off
# AuthPAMConfig   ftp
 TimeoutLogin   120
 TimeoutIdle   600
 TimeoutNoTransfer  900
 TimeoutStalled   3600
 SFTPEngine   off
# SFTPHostKey   /etc/ssh/ssh_host_dsa_key
# SFTPHostKey   /etc/ssh/ssh_host_rsa_key
 PassivePorts   49201 49300
 DeleteAbortedStores  on
 ShowSymlinks   on
# Port 21 is the standard FTP port.
 Port    21
# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
 DefaultRoot    ~
 
# Don't use IPv6 support by default.
# UseIPv6   off
 
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
 Umask    002
 
# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
 MaxClients   20 "Sorry, max %m users -- try again later"
 MaxClientsPerHost  10 "Sorry, max 5 connection per host"
 MaxLoginAttempts  3 "Sorry, max 3 login -- try again later"
 DenyFilter   \*.*/
# <IfModule mod_clamav.c>
#  ClamAV   off
# </IfModule>
 <IfModule mod_lang_c>
  LangEngine  on
  LangDefault  ru_RU
  UseEncoding  on
  UseEncoding  UTF8 CP1251
 </IfModule>
 
# <IfModule mod_sftp.c>
#  SFTPEngine  on
#  SFTPLog   /var/log/proftpd/sftp.log
#  Port   8022
#  SFTPHostKey  /etc/ssh/ssh_host_rsa_key
#  SFTPHostKey  /etc/ssh/ssh_host_dsa_key
#  SFTPAuthorizedUserKeys file:~/.sftp/authorized_keys
#  SFTPCompression  delayed
#  MaxLoginAttempts 6
# </IfModule>
 
# Normally, we want files to be overwriteable.
 AllowOverwrite   off
 
# Bar use of SITE CHMOD by default
 <Limit LOGIN>
  Order allow,deny
  Allow from all
 </Limit>
 
 <GLOBAL>
  AllowOverwrite  no
 </GLOBAL>
 <Anonymous /home/ftp>
  User   ftp
  Group   users
# We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias  anonymous ftp
# Limit the maximum number of anonymous logins
  MaxClients  10
# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
  DisplayLogin  welcome.msg
  DisplayChdir  .message
# Limit WRITE everywhere in the anonymous chroot
  <Limit CWD DIRS READ LIST>
   AllowAll
  </Limit>
  <Limit WRITE>
   DenyAll
  </Limit>
  <Directory /home/ftp/upload/*>
   <Limit READ RETR GET WRITE STOR CWD MKD RMD>
    AllowAll
   </Limit>
   <Limit DELE>
    DenyAll
   </Limit>
   <Limit READ>
    DenyAll
   </Limit>
  </Directory>
  <Directory /home/ftp/download/*>
   <Limit READ CWD RETR>
    AllowAll
   </Limit>
   <Limit WRITE>
    DenyAll
   </Limit>
  </Directory>
 </Anonymous>