Proftpd Server

Proftpd Server is another type of FTP server which is highly configurabale and Much more secure than conventional FTP server of Linux ie, vsftpd .  Proftpd server uses apacahe like configuration file . It can also control resources as how many instances of server run at any given time.

Its configuration file is  /etc/proftpd.conf 


Now m gonna tell some details about Proftpd.conf file  

ServerName : Represent FTP server name .

ServrType : standalone

DefaultServer : since FTP supports many server simultaneously virtual ftp servers , it means we may have server called default ftp server and one or more virtual ftp server .Main server s enabled by this directives .
If we wanna use virtual server and donot service ftp request on main default server keep this directive off.

Port : port where seervcie executes port 21

umask : 027 for getting default permision 750

MaxInstance:  defines no. of proftpd instance that are running simultaneously before refusing connection

<Directory /*>   Allows set of driectives that applies to particular directory path

AlllowOverwrite : this directive allow FTP user to overwrite any files they want

<Anonymous ~ftp>  creates anonymous ftp.


Securing the FTP Connectiion 


Restricting FTP connection Via IP address 
To enable IPbased authentication with main server or virtual server

     <Limit LOGIN>
  Order Allow,Deny
 Allow from 192.168.1.2, 192.168.1.3.192.168.1.4
 Deny from all
</Limit>

PAM based Authenticatioin


To enable PAM file based authentication  use following directive
    AuthPAMAuthoritative  on
    AuthPAMConfig  ftp

Disable Directory Creation and deletion privelages


<Directory /*>
<Limit MKD RMD> 
DenyAll 
</Limit>
</Diretory>

Allowing Certain group of users and users for directory creation and deletion


<Directory /*>
<Limit MKD RMD>
DenyAll
AllowGroup <groupname>
AllowUser  <username>
</Limit>
</Directory>

Restricitng Access to single Directory 


<Directory /*>
<Limit CWD>
DenyAll
</Limit>
</Directory>

Controllig READWRITE Access  


<Directory /files/Download>
<Limit READ >
AllowGroup <groupname>
Allowuser <username>
</Limit>
<Limit WRITE>
AllowUser <username> 
DenyGroup <groupname>
</Limit>


Limiting Directory Browsing Privelages


<Directory /path>
<Limit DIRS>
DenyGroup <groupname>
</Limit>
</Directory>

Controlling BufferOverflow Attack  


this is most common type of attack method still folllowed by intruders , To prevent such type of attack on your ftp server Proftpd provides directive CommandBufferSize  whos value when set apprpriately can prevent Buffer Overflow ATTACK  


CommandBufferSize 512




This is Simple Proftpd Configurationa and Securtiy features for FTP server .............Thank u