https://wiki.cs.earlham.edu/index.php?action=history&feed=atom&title=PROFTPDPROFTPD - Revision history2026-07-23T02:19:30ZRevision history for this page on the wikiMediaWiki 1.44.2https://wiki.cs.earlham.edu/index.php?title=PROFTPD&diff=5798&oldid=prevMarouf at 22:05, 4 June 20072007-06-04T22:05:43Z<p></p>
<p><b>New page</b></p><div>Install the port from /usr/ports/ftp/proftpd<br />
<br />
make; make install.<br />
<br />
'I selected all defaults for the install'<br />
<br />
<br />
'''===> SECURITY REPORT:'''<br />
This port has installed the following files, which may act as network<br />
servers and may therefore pose a remote security risk to the system.<br />
<br />
''/usr/local/sbin/proftpd''<br />
<br />
This port has installed the following startup scripts, which may cause<br />
these network services to be started at boot time.<br />
<br />
''/usr/local/etc/rc.d/proftpd''<br />
<br />
'''make sure to edit /usr/local/etc/proftpd.conf'''<br />
<br />
also add '''proftpd_enable="YES"''' to /etc/rc.conf<br />
<br />
<br />
'''Tips'''<br />
<br />
make sure to touch /var/log/proftpd.log '- for first time install'<br />
<br />
also vi /etc/newsyslog.conf and add the following line to rotate the log<br />
<br />
/var/log/proftpd.log 600 3 1000 * J<br />
<br />
----<br />
'''Current proftpd.conf settings'''<br />
<pre><br />
ServerName "Earlham CS Cluster Hopperprime ftp server"<br />
ServerType standalone<br />
DefaultServer on<br />
ScoreboardFile /var/run/proftpd.scoreboard<br />
# Logging<br />
SystemLog /var/log/proftpd.log<br />
DisplayLogin /etc/motd<br />
Port 21<br />
MaxLoginAttempts 3<br />
MaxClientsPerHost 3 "Sorry, you may not connect more than three times."<br />
#Ports<br />
PassivePorts 40000 49999<br />
<br />
#set some basics on timeouts, etc...<br />
TimeoutStalled 1800<br />
TimeoutLogin 120<br />
TimeoutIdle 600<br />
TimeoutNoTransfer 900<br />
<br />
# Umask 022 is a good standard umask to prevent new dirs and files<br />
# from being group and world writable.<br />
Umask 022<br />
<br />
# To prevent DoS attacks, set the maximum number of child processes<br />
# to 30. If you need to allow more than 30 concurrent connections<br />
# at once, simply increase this value. Note that this ONLY works<br />
# in standalone mode, in inetd mode you should use an inetd server<br />
# that allows you to limit maximum number of processes per service<br />
# (such as xinetd).<br />
MaxInstances 30<br />
CommandBufferSize 512<br />
<br />
# Set the user and group under which the server will run.<br />
User nobody<br />
Group nogroup<br />
<br />
# To cause every FTP user to be "jailed" (chrooted) into their home<br />
# directory, uncomment this line.<br />
#DefaultRoot ~<br />
<br />
# Normally, we want files to be overwriteable.<br />
AllowOverwrite on<br />
<br />
# Bar use of SITE CHMOD by default<br />
<Limit SITE_CHMOD><br />
DenyAll<br />
</Limit><br />
</pre></div>Marouf