четверг, 7 августа 2008 г.

proftpd

USE="-alc" emerge proftpd
#нах*й alc!!!!


cp /bin/false /bin/ftp
echo "/bin/ftp" >> /etc/shells
#обойти pam


useradd -g ftp username # добавить анонимуса в группу фтп
chown -R someuser:somegroup home/ftp #передать владение папкой c рекурсией
vim /etc/ftpusers #убить анонимуса
mount --bind olddir newdir #жесткая ссылка на локальные папки


#Редактируя посмотри нормальный конфиг
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use. It establishes a single server
# and a single anonymous login. It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anonymous access.
DefaultAddress 192.168.10.9
ServerName "ProFTPD Default Installation"
ServerType standalone
DefaultServer on
RequireValidShell off
#AuthPAM off
#AuthPAMConfig ftp
UseReverseDNS off
IdentLookups off
AllowOverride off
WtmpLog off
# Port 21 is the standard FTP port.
Port 21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit the maximum number of processes per service
# (such as xinetd).
MaxInstances 30

# Set the user and group under which the server will run.
User nobody
Group nogroup

# Normally, we want files to be overwriteable.

AllowOverwrite on


# A basic anonymous configuration, with no upload directories.

User anonymous
Group ftp

# We want clients to be able to login with "anonymous" as well as "ftp".
# UserAlias anonymous ftpd
# UserAlias nobody proftpd
# UserAlias anonymous nobody
# Limit the maximum number of anonymous logins.
MaxClients 10

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayChdir .message

# Limit WRITE everywhere in the anonymous chroot.

DenyAll


AllowOverwrite on

AllowAll



Комментариев нет: