[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

proftpd problem



Hello,

I've got a problem with my proftpd.conf tuning.

I want a ftp chroot in which are 2 directories:
-> public
-> private

The first one is opened to any ftp/anonymous users and the second only to guest/anonymous 
users.
guest user is defined in /etc/passwd: guest:x:2003:65534:::/bin/false

I want that ftp/anonymous users can browse only in public.
I want that guest/anonymous users can browse in both directories.

However, my current configuration (*1) allows ftp/anonymous to browse my private directories. 
They cannot access to the files but they can list them. How to forbid access to the private 
directory?

Thanks.


(*1): /etc/proftpd.conf

<Anonymous ~ftp>
        User                    ftp
        Group                   nogroup
        UserAlias               anonymous ftp
        RequireValidShell       off
        MaxClients              10

                <Limit LOGIN>
                                AllowAll
                </Limit>
                <Limit READ>
                                DenyAll
                </Limit>
                <Limit WRITE>
                                DenyAll
                </Limit>
                <Limit STOR>
                                DenyAll
                </Limit>
        <Directory /public/*>
                <Limit READ>
                                AllowAll
                </Limit>
                <Limit WRITE>
                                DenyAll
                </Limit>
                <Limit STOR>
                                DenyAll
                </Limit>
        </Directory>
</Anonymous>

<Anonymous ~babylone>
       User                    guest
       Group                   nobody
       AnonRequirePassword     on

       <Limit LOGIN>
                               AllowAll
       </Limit>
        <Directory *>
                <Limit READ>
                                AllowAll
                </Limit>
               <Limit WRITE>
                                DenyAll
                </Limit>
               <Limit STOR>
                                DenyAll
                </Limit>
        </Directory>
</Anonymous>


-- 
Stevan Kanban



Reply to: