# File is managed by Puppet

# Include DSO modules
Include /etc/proftpd/modules.conf

ServerName "ftp server"
ServerIdent on "FTP Server ready."
DefaultServer on
DefaultRoot ~/ !support,!wheel,!www
AuthPAMConfig proftpd
AuthOrder mod_auth_file.c
UseReverseDNS off
User nobody
Group nogroup
MaxInstances 256
UseSendfile off
LogFormat default  "%h %l %u %t \"%r\" %s %b"
LogFormat auth     "%v [%P] %h %t \"%r\" %s"
TransferLog /var/log/proftpd/xferlog
SystemLog /var/log/proftpd/proftpd.log
ModuleControlsACLs insmod,rmmod allow user root
ModuleControlsACLs lsmod allow user *
ControlsEngine on
ControlsACLs all allow user root
ControlsSocketACL allow user *
ControlsLog /var/log/proftpd/controls.log
AllowRetrieveRestart on
AllowStoreRestart on
AuthUserFile /etc/ftppasswd
DefaultAddress 127.0.0.1
DenyFilter \*.*/
IdentLookups off
LangEngine on
LangPath /usr/share/locale
ListOptions -a
MaxClients 192
MaxClientsPerHost 16
MaxClientsPerUser 16
ServerType standalone
ScoreboardFile /var/run/proftpd.scoreboard
tcpBackLog 128
Umask 022
PathDenyFilter "\\.ftpaccess$"
RLimitCPU 600 600
RLimitMemory session 400M 400M
RLimitOpenFiles 256 256
RootLogin off
RequireValidShell off
TimesGMT off
TimeoutLogin 60
TimeoutNoTransfer 900
ExtendedLog /var/log/proftpd/proftpd.log WRITE
WtmpLog off
SetEnv TZ Europe/Moscow

<IfModule mod_ctrls_admin.c>
  AdminControlsEngine on
  AdminControlsACLs all allow user root
</IfModule>

<IfModule mod_vroot.c>
  VRootEngine on
</IfModule>

<IfModule mod_tls_shmcache.c>
  TLSSessionCache shm:/file=/var/run/proftpd/sesscache
</IfModule>

<Global>
  Umask 022
  RequireValidShell off
  AllowOverwrite on
  <Limit ALL SITE_CHMOD>
    AllowAll
  </Limit>
</Global>

<Directory />
  AllowOverwrite on
  Umask 022
</Directory>

<IfModule mod_delay.c>
  DelayEngine off
</IfModule>

<IfModule mod_clamav.c>
  ClamAV on
  ClamServer 127.0.0.1
  ClamPort 3310
  ClamStream on
  ClamMaxSize 16 Mb
</IfModule>

<IfModule mod_udnsbl.c>
  UDNSBLEngine off
</IfModule>