proftpd prob...

# This is a basic ProFTPD configuration file (rename it to
   # 'proftpd.conf' for actual use. It establishes a single server
   # and a single anonymous login. It assumes that you have a user/group
   # "nobody" and "ftp" for normal operation and anon.


   ServerName "Raidens Private-FTP"
   ServerType standalone
DeferWelcome off


   ShowSymlinks on
   MultilineRFC2228 on
DefaultServer on
   AllowOverwrite on
   bind 213.239.195.26


   TimeoutNoTransfer 600
   TimeoutStalled 600
   TimeoutIdle 1200




   DisplayLogin welcome.msg


   DenyFilter \*.*/


   # Uncomment this if you are using NIS or LDAP to retrieve passwords:
   #PersistentPasswd off


   # Port 21 is the standard FTP port.
Port 666




   # To prevent DoS attacks, set the maximum number of child processes
   # to 30. If you need to allow more than 30 concurrent connections
   # at once, simply increase this value. Note that this ONLY works
   # in standalone mode, in inetd mode you should use an inetd server
   # that allows you to limit maximum number of processes per service
   # (such as xinetd)
   MaxInstances 30


   # Set the user and group that the server normally runs at.
   User nobody
   Group nogroup


  # Normally, we want files to be overwriteable.
   <Directory /*>
   # Umask 022 is a good standard umask to prevent new files and dirs
   # (second parm) from being group and world writable.
   Umask 022 022


   AllowOverwrite on
   </Directory>


   # Hier meine Ergänzungen


   # chroot für alle User der Gruppe ftpuser
   DefaultRoot ~ ftpuser


   # Login nur von Mitgliedern der Gruppe ftpuser erlauben
   <Limit LOGIN>
   DenyGroup !ftpuser
   </Limit>




   # Root-Login verbieten und gültige Shell verlangen (in /etc/shells)
   <Global>
   RootLogin off
   RequireValidShell off
   </Global>


   # Speed erhoehen
   UseReverseDNS off
IdentLookups off


   # Logging Formate
   LogFormat default "%h %l %u %t \"%r\" %s %b"
   LogFormat auth "%v [%P] %h %t \"%r\" %s"
   LogFormat write "%h %l %u %t \"%r\" %s %b"


   # Logging aktivieren


   # alle logins
   ExtendedLog /var/log/ftp_auth.log AUTH auth


   # file/dir Zugriff
   ExtendedLog /var/log/ftp_access.log WRITE,READ write
AllowForeignAddress on
AllowRetrieveRestart on
AllowStoreRestart on




   # für paranoide (vorsicht, erzeugt grosse Logfiles)
   #ExtendedLog /var/log/ftp_paranoid.log ALL default