主页 / unix / 问题 / 475684
Accepted
elbarna
Asked: 2018-10-16 13:17:22 +0800 CST

Proftpd：完全禁用用户登录

  • 772

一个简单的问题，通过这种配置，我允许匿名 ftp 用户。

ServerName          "ProFTPD Default Installation"
ServerType          standalone
DefaultServer           on
Port                2121
Umask               022
MaxInstances            30
User                ftp
Group               ftp
SystemLog           /var/log/proftpd.log
TransferLog         /var/log/xferlog
PassivePorts 49152 65535
UseFtpUsers off
<Directory /*>
  AllowOverwrite        on
</Directory>
  <Limit LOGIN>
    AllowUser ftp
    AllowUser anonymous
    DenyAll
  </Limit>
<Anonymous ~ftp>
  RequireValidShell     off
  User              ftp
  Group             ftp
  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias         anonymous ftp
  # Limit the maximum number of anonymous logins
  MaxClients            50
  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin          welcome.msg
  DisplayChdir          .message
  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
  # An upload directory that allows storing files but not retrieving
  # or creating directories.
</Anonymous>

但是使用

ftp localhost 21

它要求输入密码我的问题是：如何完全禁用用户登录以只允许匿名？我想要这样的答案

"sorry ftp server is only anonymous"
proftpd

1 个回答

  1. Best Answer

    引自ProFTPD：配置限制

    如果网站希望只允许匿名访问怎么办？这将使用 LOGIN 命令组进行配置，如上：

    <Limit LOGIN>
  DenyAll
</Limit>

<Anonymous ~ftp>
  <Limit LOGIN>
    AllowAll
  </Limit>
  ...
</Anonymous>

    该<Limit>部分之外的<Anonymous>部分拒绝所有人登录。但是，该<Anonymous>部分有一个<Limit>允许每个人登录；允许匿名登录，拒绝非匿名登录。

    PS你可能想在sorry.msg文件中使用“抱歉ftp服务器只是匿名”文本创建单独的DisplayLogin sorry.msg外部部分。<Anonymous>

    • 2

相关问题