2019-05-17 22:41:50 +00:00
|
|
|
AuthOrder mod_auth_file.c
|
|
|
|
|
AuthUserFile /auth/passwd
|
|
|
|
|
RequireValidShell off
|
|
|
|
|
ScoreBoardFile /run/proftpd/scoreboard
|
|
|
|
|
PassivePorts 50000 50500
|
|
|
|
|
AllowOverwrite on
|
|
|
|
|
WtmpLog off
|
|
|
|
|
UseReverseDNS off
|
|
|
|
|
DefaultRoot ~
|
|
|
|
|
Maxclients 30
|
|
|
|
|
MaxClientsPerHost 5
|
|
|
|
|
|
2019-05-17 23:20:52 +00:00
|
|
|
<IfModule mod_tls.c>
|
|
|
|
|
TLSEngine on
|
|
|
|
|
TLSVerifyClient off
|
|
|
|
|
TLSRenegotiate none
|
|
|
|
|
TLSProtocol TLSv1.2
|
|
|
|
|
TLSRSACertificateFile /etc/proftpd/cert.pem
|
|
|
|
|
TLSRSACertificateKeyFile /etc/proftpd/privkey.pem
|
|
|
|
|
TLSCertificateChainFile /etc/proftpd/chain.pem
|
|
|
|
|
TLSCipherSuite "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:RC4-SHA:AES256-GCM-SHA384:AES256-SHA256:CAMELLIA256-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:CAMELLIA128-SHA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
|
|
|
|
|
TLSOptions NoSessionReuseRequired AllowClientRenegotiations
|
|
|
|
|
TLSRequired on
|
|
|
|
|
</IfModule>
|
