Pro-FTP 要如何設定USER只能下載不能上傳呢？【求助】

**bigmichael** · 2003-06-20, 03:05 PM

我的Pro-FTP版本是proftpd-1.2.5
我的以下是我的proftpd.conf的設定檔內容

[root@linux root]# vi /usr/local/etc/proftpd.conf

# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use. It establishes a single server
# and a single anonymous login. It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName "ProFTPD Default Installation"
ServerType inetd
DefaultServer on

# Port 21 is the standard FTP port.
Port 21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30

# Set the user and group that the server normally runs at.
User nobody
Group nobody

# Normally, we want files to be overwriteable.
<Directory /*>
AllowOverwrite on
</Directory>

# A basic anonymous configuration, no upload directories.
<Anonymous ~ftp>
User ftp
Group ftp
# We want clients to be able to login with "anonymous" as well as "ftp"
UserAlias anonymous ftp

# Limit the maximum number of anonymous logins
MaxClients 10

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayFirstChdir .message

# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>

</Anonymous>

我建個test的帳號
[root@linux home]# ll
drwx------ 3 test test 4096 May 18 10:49 test

這個test帳號登入時權限是全開的，可上傳也可下載。
我有試著改成
dr-x------ 3 test test 4096 May 18 10:49 test
一樣是可上傳也可下載。
我再試著改成
dr-------- 3 test test 4096 May 18 10:49 test
完全無法登入

我猜是要改proftpd.conf這個設定檔內容的
<Directory /*>
AllowOverwrite on
</Directory>

可是不知要如何改才能讓，某些帳號權限全，開可上傳也可下載。
又某些帳號只能下載不能上傳呢？

有哪位大大知道可以告訴我嗎？
謝謝啦！

**repsol** · 2003-06-23, 09:58 PM

1.目錄一定要有x的權限，才可以進入(root 例外)。你自己先試試看，不行再問。

2.建議你看看這邊所寫的
http://www.proftpd.org/docs/directiv...ref_Limit.html
http://www.proftpd.org/docs/directiv..._DenyUser.html

上面已經寫的很清楚了，不難。

靈活交叉運用即可!!

貼個自己的範例給你看，不要照抄，因為這應該不是你的需求。
建議你先弄懂上面網址的意義。

語法:

<Directory /home/somebody>
        <Limit WRITE>
        DenyUser somebody
        </Limit>
        <Limit READ>
        DenyUser somebody
        </Limit>
        <Limit CWD>
        DenyUser somebody
        </Limit>
</Directory>