Membangun FTP Server Dengan ProFTP February 3, 2009

Konfigurasi Anonymous user Ftp dengan Proftp

Install Proftpd

root # rpm -ivh proftpd-1.3.1-0.rc2.3mdv2007.1.rpm

Lakukan Konfigurasi Pada /etc/proftpd.conf

root # vi /etc/proftpd.conf

Berikut konfigurasi Proftp

#

# /etc/proftpd/proftpd.conf — This is a basic ProFTPD configuration file.

# To really apply changes reload proftpd after modifications.

#

# Includes DSO modules

Include /etc/proftpd.d/*.conf

# This is the directory where DSO modules resides

ModulePath /usr/lib/proftpd

# Allow only user root to load and unload modules, but allow everyone

# to see which modules have been loaded

ModuleControlsACLs insmod,rmmod allow user root

ModuleControlsACLs lsmod allow user *

ServerName “ProFTPD Default Installation”

ServerType standalone

DeferWelcome off

MultilineRFC2228 on

DefaultServer on

ShowSymlinks on

TimeoutNoTransfer 600

TimeoutStalled 600

TimeoutIdle 1200

DisplayLogin welcome.msg

DisplayChdir .message

ListOptions “-l”

DenyFilter \*.*/

UseIPv6 Off

# Allow FTP resuming.

# Remember to set to off if you have an incoming ftp for upload.

AllowStoreRestart on

# Port 21 is the standard FTP port.

Port 21

# In some cases you have to specify passive ports range to by-pass

# firewall limitations. Ephemeral ports can be used for that, but

# feel free to use a more narrow range.

#PassivePorts 49152 65534

# To prevent DoS attacks, set the maximum number of child processes

# to 30. If you need to allow more than 30 concurrent connections

# at once, simply increase this value. Note that this ONLY works

# in standalone mode, in inetd mode you should use an inetd server

# that allows you to limit maximum number of processes per service

# (such as xinetd)

MaxInstances 30

# Set the user and group under which the server will run.

User nobody

Group nogroup

# Umask 022 is a good standard umask to prevent new files and dirs

# (second parm) from being group and world writable.

Umask 022 022

## Untuk keamanan Baris DefaultRoot akan menyebabkan user tidak dapat masuk ke direktori root ##

# To cause every FTP user to be “jailed” (chrooted) into their home

# directory, uncomment this line.

#DefaultRoot ~

DefaultRoot ~

# Normally, we want files to be overwriteable.

AllowOverwrite off

# Uncomment this if you are using NIS or LDAP to retrieve passwords:

PersistentPasswd off

# Be warned: use of this directive impacts CPU average load!

#

# Uncomment this if you like to see progress and transfer rate with ftpwho

# in downloads. That is not needed for uploads rates.

#UseSendFile off

TransferLog /var/log/proftpd/proftpd.log

SystemLog /var/log/proftpd/proftpd.log

TLSEngine off

QuotaEngine on

Ratios on

# Delay engine reduces impact of the so-called Timing Attack described in

# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02

# It is on by default.

DelayEngine on

ControlsEngine on

ControlsMaxClients 2

ControlsLog /var/log/proftpd/controls.log

ControlsInterval 5

ControlsSocket /var/run/proftpd/proftpd.sock

AdminControlsEngine on

# Bar use of SITE CHMOD by default

DenyAll

### Baris ini yang menjadi defult direktori untuk anynomous user.

User ftp

Group nogroup

UserAlias anonymous ftp

DirFakeUser on ftp

DirFakeGroup on ftp

RequireValidShell off

MaxClients 10

DisplayLogin welcome.msg

DisplayFirstChdir .message

DenyAll