proftpd problem

From: Stevan Kanban (stevan_at_ojingo.net)
Date: 01/16/05

  • Next message: Michael Marsh: "Re: password protection of a file" 
    Date: Sun, 16 Jan 2005 17:35:23 +0100
To: debian-user@lists.debian.org

    Hello,

    I've got a problem with my proftpd.conf tuning.

    I want a ftp chroot in which are 2 directories:
    -> public
    -> private

    The first one is opened to any ftp/anonymous users and the second only to guest/anonymous
    users.
    guest user is defined in /etc/passwd: guest:x:2003:65534:::/bin/false

    I want that ftp/anonymous users can browse only in public.
    I want that guest/anonymous users can browse in both directories.

    However, my current configuration (*1) allows ftp/anonymous to browse my private directories.
    They cannot access to the files but they can list them. How to forbid access to the private
    directory?

    Thanks.

    (*1): /etc/proftpd.conf

    <Anonymous ~ftp>
            User ftp
            Group nogroup
            UserAlias anonymous ftp
            RequireValidShell off
            MaxClients 10

                    <Limit LOGIN>
                                    AllowAll
                    </Limit>
                    <Limit READ>
                                    DenyAll
                    </Limit>
                    <Limit WRITE>
                                    DenyAll
                    </Limit>
                    <Limit STOR>
                                    DenyAll
                    </Limit>
            <Directory /public/*>
                    <Limit READ>
                                    AllowAll
                    </Limit>
                    <Limit WRITE>
                                    DenyAll
                    </Limit>
                    <Limit STOR>
                                    DenyAll
                    </Limit>
            </Directory>
    </Anonymous>

    <Anonymous ~babylone>
           User guest
           Group nobody
           AnonRequirePassword on

           <Limit LOGIN>
                                   AllowAll
           </Limit>
            <Directory *>
                    <Limit READ>
                                    AllowAll
                    </Limit>
                   <Limit WRITE>
                                    DenyAll
                    </Limit>
                   <Limit STOR>
                                    DenyAll
                    </Limit>
            </Directory>
    </Anonymous> 

    -- 
Stevan Kanban
-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Michael Marsh: "Re: password protection of a file"