RootForum Community

Code: Select all

#
# /etc/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#

ServerName         "Debian"
ServerType         standalone
DeferWelcome         off

MultilineRFC2228      on
DefaultServer         on
ShowSymlinks         on

TimeoutNoTransfer      600
TimeoutStalled         600
TimeoutIdle         1200

DisplayLogin                    welcome.msg
DisplayFirstChdir               .message
ListOptions                   "-l"

DenyFilter         *.*/

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd      off

# Uncomment this if you would use TLS module:
#TLSEngine          on

# Uncomment this if you would use quota module:
#Quotas            on

# Uncomment this if you would use ratio module:
#Ratios            on

# Port 21 is the standard FTP port.
Port            21

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances         30

# Set the user and group that the server normally runs at.
User            nobody
Group            nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask            022  022
# Normally, we want files to be overwriteable.
AllowOverwrite         on

# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default.
#DelayEngine          off

# A basic anonymous configuration, no upload directories.

# <Anonymous ~ftp>
#   User            ftp
#   Group            nogroup
#   # We want clients to be able to login with "anonymous" as well as "ftp"
#   UserAlias         anonymous ftp
#   # Cosmetic changes, all files belongs to ftp user
#   DirFakeUser   on ftp
#   DirFakeGroup on ftp
#
#   RequireValidShell      off
#
#   # Limit the maximum number of anonymous logins
#   MaxClients         10
#
#   # We want 'welcome.msg' displayed at login, and '.message' displayed
#   # in each newly chdired directory.
#   DisplayLogin         welcome.msg
#   DisplayFirstChdir      .message
#
#   # Limit WRITE everywhere in the anonymous chroot
#   <Directory *>
#     <Limit WRITE>
#       DenyAll
#     </Limit>
#   </Directory>
#
#   # Uncomment this if you're brave.
#   # <Directory incoming>
#   #   # Umask 022 is a good standard umask to prevent new files and dirs
#   #   # (second parm) from being group and world writable.
#   #   Umask            022  022
#   #            <Limit READ WRITE>
#   #            DenyAll
#   #            </Limit>
#   #            <Limit STOR>
#   #            AllowAll
#   #            </Limit>
#   # </Directory>
#
# </Anonymous>
debugLevel 9

Serverlog /var/log/proftpd.debug.log

Code: Select all

Feb 13 16:40:03  performing ident lookup
Feb 13 16:40:03  ident connection failed: No route to host
Feb 13 16:40:03  ident lookup returned 'UNKNOWN'
Feb 13 16:40:03  connected - local  : ***.***.***.***:21
Feb 13 16:40:03  connected - remote : ***.***.***.***:63576
Feb 13 16:40:03  FTP session opened.
Feb 13 16:40:03  dispatching PRE_CMD command 'USER csserver3' to mod_rewrite
Feb 13 16:40:03  dispatching PRE_CMD command 'USER csserver3' to mod_tls
Feb 13 16:40:03  dispatching PRE_CMD command 'USER csserver3' to mod_core
Feb 13 16:40:03  dispatching PRE_CMD command 'USER csserver3' to mod_core
Feb 13 16:40:03  dispatching PRE_CMD command 'USER csserver3' to mod_delay
Feb 13 16:40:03  dispatching PRE_CMD command 'USER csserver3' to mod_auth
Feb 13 16:40:03  dispatching auth request "endpwent" to module mod_radius
Feb 13 16:40:03  dispatching auth request "endpwent" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "endpwent" to module mod_auth_unix
Feb 13 16:40:03  dispatching auth request "endgrent" to module mod_radius
Feb 13 16:40:03  dispatching auth request "endgrent" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "endgrent" to module mod_auth_unix
Feb 13 16:40:03  dispatching CMD command 'USER csserver3' to mod_ratio
Feb 13 16:40:03  dispatching CMD command 'USER csserver3' to mod_auth
Feb 13 16:40:03  dispatching auth request "getgroups" to module mod_radius
Feb 13 16:40:03  dispatching auth request "getgroups" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "getgroups" to module mod_auth_unix
Feb 13 16:40:03  dispatching POST_CMD command 'USER csserver3' to mod_delay
Feb 13 16:40:03  mod_delay/0.4: selecting median interval from 1 value
Feb 13 16:40:03  dispatching LOG_CMD command 'USER csserver3' to mod_log
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_rewrite
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_wrap
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_radius
Feb 13 16:40:03  dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
Feb 13 16:40:03  dispatching auth request "endpwent" to module mod_radius
Feb 13 16:40:03  dispatching auth request "endpwent" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "endpwent" to module mod_auth_unix
Feb 13 16:40:03  dispatching auth request "endgrent" to module mod_radius
Feb 13 16:40:03  dispatching auth request "endgrent" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "endgrent" to module mod_auth_unix
Feb 13 16:40:03  dispatching CMD command 'PASS (hidden)' to mod_auth
Feb 13 16:40:03  dispatching auth request "getgroups" to module mod_radius
Feb 13 16:40:03  dispatching auth request "getgroups" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "getgroups" to module mod_auth_unix
Feb 13 16:40:03  dispatching auth request "getpwnam" to module mod_radius
Feb 13 16:40:03  dispatching auth request "getpwnam" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "getpwnam" to module mod_auth_unix
Feb 13 16:40:03  dispatching auth request "gid_name" to module mod_radius
Feb 13 16:40:03  dispatching auth request "gid_name" to module mod_auth_file
Feb 13 16:40:03  dispatching auth request "gid_name" to module mod_auth_unix
Feb 13 16:40:03  dispatching auth request "auth" to module mod_radius
Feb 13 16:40:03  dispatching auth request "auth" to module mod_tls
Feb 13 16:40:03  dispatching auth request "auth" to module mod_auth_pam
Feb 13 16:40:03  ROOT PRIVS at ../../../modules/mod_auth_pam.c:258
Feb 13 16:40:05  PAM(csserver3): Authentication failure.
Feb 13 16:40:05  RELINQUISH PRIVS at ../../../modules/mod_auth_pam.c:416
Feb 13 16:40:05  dispatching auth request "auth" to module mod_auth_file
Feb 13 16:40:05  dispatching auth request "auth" to module mod_auth_unix
Feb 13 16:40:05  ROOT PRIVS at ../../../modules/mod_auth_unix.c:431
Feb 13 16:40:05  dispatching auth request "check" to module mod_radius
Feb 13 16:40:05  dispatching auth request "check" to module mod_tls
Feb 13 16:40:05  dispatching auth request "check" to module mod_auth_file
Feb 13 16:40:05  dispatching auth request "check" to module mod_auth_unix
Feb 13 16:40:05  USER csserver3 (Login failed): Incorrect password.
Feb 13 16:40:05  dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
Feb 13 16:40:05  mod_delay/0.4: selecting median interval from 1 value
Feb 13 16:40:05  dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
Feb 13 16:40:05  dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
Feb 13 16:41:05  dispatching auth request "endpwent" to module mod_radius
Feb 13 16:41:05  dispatching auth request "endpwent" to module mod_auth_file
Feb 13 16:41:05  dispatching auth request "endpwent" to module mod_auth_unix
Feb 13 16:41:05  dispatching auth request "endgrent" to module mod_radius
Feb 13 16:41:05  dispatching auth request "endgrent" to module mod_auth_file
Feb 13 16:41:05  dispatching auth request "endgrent" to module mod_auth_unix
Feb 13 16:41:05  FTP session closed.
Feb 13 16:41:57  performing ident lookup
Feb 13 16:41:58  ident connection failed: No route to host
Feb 13 16:41:58  ident lookup returned 'UNKNOWN'
Feb 13 16:41:58  connected - local  : ***.***.***.***:21
Feb 13 16:41:58  connected - remote : ***.***.***.***:63576
Feb 13 16:41:58  FTP session opened.
Feb 13 16:41:58  dispatching PRE_CMD command 'USER csserver3' to mod_rewrite
Feb 13 16:41:58  dispatching PRE_CMD command 'USER csserver3' to mod_tls
Feb 13 16:41:58  dispatching PRE_CMD command 'USER csserver3' to mod_core
Feb 13 16:41:58  dispatching PRE_CMD command 'USER csserver3' to mod_core
Feb 13 16:41:58  dispatching PRE_CMD command 'USER csserver3' to mod_delay
Feb 13 16:41:58  dispatching PRE_CMD command 'USER csserver3' to mod_auth
Feb 13 16:41:58  dispatching auth request "endpwent" to module mod_radius
Feb 13 16:41:58  dispatching auth request "endpwent" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "endpwent" to module mod_auth_unix
Feb 13 16:41:58  dispatching auth request "endgrent" to module mod_radius
Feb 13 16:41:58  dispatching auth request "endgrent" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "endgrent" to module mod_auth_unix
Feb 13 16:41:58  dispatching CMD command 'USER csserver3' to mod_ratio
Feb 13 16:41:58  dispatching CMD command 'USER csserver3' to mod_auth
Feb 13 16:41:58  dispatching auth request "getgroups" to module mod_radius
Feb 13 16:41:58  dispatching auth request "getgroups" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "getgroups" to module mod_auth_unix
Feb 13 16:41:58  dispatching POST_CMD command 'USER csserver3' to mod_delay
Feb 13 16:41:58  mod_delay/0.4: selecting median interval from 2 values
Feb 13 16:41:58  dispatching LOG_CMD command 'USER csserver3' to mod_log
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_rewrite
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_wrap
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_radius
Feb 13 16:41:58  dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
Feb 13 16:41:58  dispatching auth request "endpwent" to module mod_radius
Feb 13 16:41:58  dispatching auth request "endpwent" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "endpwent" to module mod_auth_unix
Feb 13 16:41:58  dispatching auth request "endgrent" to module mod_radius
Feb 13 16:41:58  dispatching auth request "endgrent" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "endgrent" to module mod_auth_unix
Feb 13 16:41:58  dispatching CMD command 'PASS (hidden)' to mod_auth
Feb 13 16:41:58  dispatching auth request "getgroups" to module mod_radius
Feb 13 16:41:58  dispatching auth request "getgroups" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "getgroups" to module mod_auth_unix
Feb 13 16:41:58  dispatching auth request "getpwnam" to module mod_radius
Feb 13 16:41:58  dispatching auth request "getpwnam" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "getpwnam" to module mod_auth_unix
Feb 13 16:41:58  dispatching auth request "gid_name" to module mod_radius
Feb 13 16:41:58  dispatching auth request "gid_name" to module mod_auth_file
Feb 13 16:41:58  dispatching auth request "gid_name" to module mod_auth_unix
Feb 13 16:41:58  dispatching auth request "auth" to module mod_radius
Feb 13 16:41:58  dispatching auth request "auth" to module mod_tls
Feb 13 16:41:58  dispatching auth request "auth" to module mod_auth_pam
Feb 13 16:41:58  ROOT PRIVS at ../../../modules/mod_auth_pam.c:258
Feb 13 16:42:00  PAM(csserver3): Authentication failure.
Feb 13 16:42:00  RELINQUISH PRIVS at ../../../modules/mod_auth_pam.c:416
Feb 13 16:42:00  dispatching auth request "auth" to module mod_auth_file
Feb 13 16:42:00  dispatching auth request "auth" to module mod_auth_unix
Feb 13 16:42:00  ROOT PRIVS at ../../../modules/mod_auth_unix.c:431
Feb 13 16:42:00  dispatching auth request "check" to module mod_radius
Feb 13 16:42:00  dispatching auth request "check" to module mod_tls
Feb 13 16:42:00  dispatching auth request "check" to module mod_auth_file
Feb 13 16:42:00  dispatching auth request "check" to module mod_auth_unix
Feb 13 16:42:00  USER csserver3 (Login failed): Incorrect password.
Feb 13 16:42:00  dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
Feb 13 16:42:00  mod_delay/0.4: selecting median interval from 2 values
Feb 13 16:42:00  dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
Feb 13 16:42:00  dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
Feb 13 16:42:01  dispatching auth request "endpwent" to module mod_radius
Feb 13 16:42:01  dispatching auth request "endpwent" to module mod_auth_file
Feb 13 16:42:01  dispatching auth request "endpwent" to module mod_auth_unix
Feb 13 16:42:01  dispatching auth request "endgrent" to module mod_radius
Feb 13 16:42:01  dispatching auth request "endgrent" to module mod_auth_file
Feb 13 16:42:01  dispatching auth request "endgrent" to module mod_auth_unix
Feb 13 16:42:01  FTP session closed.