aboutsummaryrefslogtreecommitdiff
path: root/usr/pkg/etc/vsftpd/vsftpd.conf
blob: f9fcc0ae03fa53af45d1aeb78c27abb2c39b492b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# Activate logging of uploads/downloads.
#xferlog_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftpsecure
#
# You may fully customise the login banner string:
#ftpd_banner=Welcome to blah FTP service.

anonymous_enable=NO

#pam_service_name=vsftpd
#anon_root=/srv/ftp

secure_chroot_dir=/var/empty
no_anon_password=YES
seccomp_sandbox=NO
pasv_enable=YES
pasv_min_port=10090
pasv_max_port=10100

chroot_local_user=YES
passwd_chroot_enable=YES
allow_writeable_chroot=YES

# It is safe to allow writeable chroot as we are chrooting users to
# their home directories.

local_enable=YES
write_enable=YES
file_open_mode=0777
local_umask=0002

userlist_enable=YES
userlist_file=/usr/pkg/etc/vsftpd/userlist
userlist_deny=NO

log_ftp_protocol=YES
vsftpd_log_file=/var/log/vsftpd.log
dual_log_enable=YES

ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=NO
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES
rsa_cert_file=/usr/pkg/etc/vsftpd/vsftpd.crt
rsa_private_key_file=/usr/pkg/etc/vsftpd/vsftpd.key