FICHIER DE CONFIGURATION




#Faut il "chrooter" les clients se connectants  

ChrootEveryone              yes



# If the previous option is set to "no", members of the following group
# won't be caged. Others will be. If you don't want chroot()ing anyone,
# just comment out ChrootEveryone and TrustedGID.

# TrustedGID                    100



# Turn on compatibility hacks for broken clients

BrokenClientsCompatibility  no


# nombres maximun d'utilisateurs simultanés

MaxClientsNumber            50


tourne t'il en démon?

Daemonize                   yes


# nombres maximum de clients connecté simultanément avec la meme adresse

MaxClientsPerIP             8


# log verbeux(beaucoup de traces).

VerboseLog                  yes



# liste les fichiers cachés(.*), sans l'option "-a" (ex: ls -a)             

DisplayDotFiles             yes 


# n'accepte pas les connexions authentifiés, juste les connexions anonymes?

AnonymousOnly               no


# désactive les connexions anonymes, accepte seulement les authentifiés? 

NoAnonymous                 no



# quelle facilité syslog (auth, authpriv, daemon, ftp, security, user, local*)
# la facilité par défault est "ftp"."none" désactive le "logging" (plus de traces).

SyslogFacility              ftp


# affichage des cookies "fortune"(phrase d'acceuil ou autres envoyés a la connexion).

# FortunesFile              /usr/share/fortune/zippy



# pas de résolution dns dans les fichiers log.Les logs sont moins "verbeux",
# mais cela consomme moins de bande passante et de ressources.
# mettez le a "oui" sur un serveur trés chargé ou si vous n'avez pas
# de résolution dns possible

DontResolve                 yes


# temps maximun d'inactivité du client, en minutes (par défault = 15 minutes)

MaxIdleTime                 15


# fichier de configuration LDAP (voir le README.LDAP)

# LDAPConfigFile                /etc/pureftpd-ldap.conf


# fichier de configuration MySQL (voir le README.MySQL)


# MySQLConfigFile               /etc/pureftpd-mysql.conf


# fichier de configuration Postgres (voir le README.PGSQL)


# PGSQLConfigFile               /etc/pureftpd-pgsql.conf

# fichier de la base de donnée utilisateur PureDB (voir le README.Virtual-Users) 


# PureDB                        /etc/pureftpd.pdb

# Chemin pour la "pure-authd socket" ??? ( voir le README.Authentication-modules)


# ExtAuth                       /var/run/ftpd.sock


# si vous voulez activer l'authentification PAM, décommenter la ligne suivante


# PAMAuthentication             yes


# si vous voulez une simple authentification Unix (/etc/passwd), décommenter cette ligne


# UnixAuthentication            yes



# Please note that LDAPConfigFile, MySQLConfigFile, PAMAuthentication and
# UnixAuthentication can be used only once, but they can be combined
# together. For instance, if you use MySQLConfigFile, then UnixAuthentication,
# the SQL server will be asked. If the SQL authentication fails because the
# user wasn't found, another try # will be done with /etc/passwd and
# /etc/shadow. If the SQL authentication fails because the password was wrong,
# the authentication chain stops here. Authentication methods are chained in
# the order they are given. 


# limites de récursivité(profondeur de listage) de la commande 'ls'
# le premier argument est le nombres maximun de fichiers pouvant etre visualisés
# le second est le nombre limite de sous dossiers pouvant etre explorés
# (la profondeur de listage)    



LimitRecursion              2000 8


# les utilisateurs anonymes peuvent ils créer de nouveaux répertoires?


AnonymousCanCreateDirs      no


# si le système est plus chargé que la valeur suivante
# les utilisateurs anonymes ne pourront télécharger



MaxLoad                     4


# intervale de port utilisé pour répondre aux connexions passive. - pour firewalling- 


# PassivePortRange          30000 50000


# force une adresse IP a une réponse PASV/EPSV/SPSV. pour le NAT(translation/traduction d'adresse)

# Force an IP address in PASV/EPSV/SPSV replies. - for NAT.
# Symbolic host names are also accepted for gateways with dynamic IP
# addresses.

# ForcePassiveIP                192.168.0.1


# ratio de Upload/Download pour les utilisateurs anonymes. 


# AnonymousRatio                1 10



# ratio de Upload/Download pour tous les utilisateurs.
# cette directive est prioritaire sur la précédente.  



# UserRatio                 1 10



# Disallow downloading of files owned by "ftp", ie.
# files that were uploaded but not validated by a local admin.

AntiWarez                   yes


# adresse IP/port en écoute sur (défault=toutes les IP et le port 21). 


# Bind                      127.0.0.1,21


# bande passante maximum pour les utilisateurs anonymes en KB/s


# AnonymousBandwidth            8



# bande passante maximum pour tous les utilisateurs(anonymes inclus) en KB/s
# Use AnonymousBandwidth *or* UserBandwidth, both makes no sense.

# UserBandwidth             8


# masque de permission pour la création de fichiers. :
#177:077 si vous etes paranoiaque


Umask                       133:022


# UID minimun pour les utilisateurs authentifiés se connectant

MinUID                      100


# Accepte le transfert FXP pour utilisateurs authentifiés seulement


AllowUserFXP                yes


# Accepte le transfert FXP pour tous les utilisateurs. 


AllowAnonymousFXP           no


# les utilisateurs ne peuvent effacer/écrire dans les fichiers
# commençant par un point ('.')

# Users can't delete/write files beginning with a dot ('.')
# even if they own them. If TrustedGID is enabled, this group
# will have access to dot-files, though.

ProhibitDotFilesWrite       no


# interdire la *lecture* des fichiers commencant par un point (.history, .ssh...)


ProhibitDotFilesRead        no


# jamais d' écrasement de fichiers, quant un fichier avec un nom deja existant sur
# le serveur est uploader, il est automatiquement renommer en file.1, file.2, file.3,...



AutoRename                  no


# interdit l'upload aux utilisateurs anonymes de nouveaux fichiers (no = upload est autorisé) 


AnonymousCantUpload         no



# Only connections to this specific IP address are allowed to be
# non-anonymous. You can use this directive to open several public IPs for
# anonymous FTP, and keep a private firewalled IP for remote administration.
# You can also only allow a non-routable local IP (like 10.x.x.x) to
# authenticate, and keep a public anon-only FTP server on another IP.

#TrustedIP                  10.1.1.1



# If you want to add the PID to every logged line, uncomment the following
# line.

#LogPID                     yes



# Create an additional log file with transfers logged in a Apache-like format :
# fw.c9x.org - jedi [13/Dec/1975:19:36:39] "GET /ftp/linux.tar.bz2" 200 21809338
# This log file can then be processed by www traffic analyzers.

 AltLog                     clf:/var/log/pureftpda.log



# Create an additional log file with transfers logged in a format optimized
# for statistic reports.

 AltLog                     stats:/var/log/pureftpds.log



# Create an additional log file with transfers logged in the standard W3C
# format (compatible with most commercial log analyzers)

 AltLog                     w3c:/var/log/pureftpdw.log



# Disallow the CHMOD command. Users can't change perms of their files.

#NoChmod                     yes



# Allow users to resume and upload files, but *NOT* to delete them.

#KeepAllFiles                yes



# Automatically create home directories if they are missing

#CreateHomeDir               yes



# Enable virtual quotas. The first number is the max number of files.
# The second number is the max size of megabytes.
# So 1000:10 limits every user to 1000 files and 10 Mb.

#Quota                       1000:10



# If your pure-ftpd has been compiled with standalone support, you can change
# the location of the pid file. The default is /var/run/pure-ftpd.pid

#PIDFile                     /var/run/pure-ftpd.pid



# If your pure-ftpd has been compiled with pure-uploadscript support,
# this will make pure-ftpd write info about new uploads to
# /var/run/pure-ftpd.upload.pipe so pure-uploadscript can read it and
# spawn a script to handle the upload.

#CallUploadScript yes



# This option is useful with servers where anonymous upload is 
# allowed. As /var/ftp is in /var, it save some space and protect 
# the log files. When the partition is more that X percent full,
# new uploads are disallowed.

MaxDiskUsage               99



# Set to 'yes' if you don't want your users to rename files.

#NoRename                  yes



# Be 'customer proof' : workaround against common customer mistakes like
# 'chmod 0 public_html', that are valid, but that could cause ignorant
# customers to lock their files, and then keep your technical support busy
# with silly issues. If you're sure all your users have some basic Unix
# knowledge, this feature is useless. If you're a hosting service, enable it.

CustomerProof              yes



# Per-user concurrency limits. It will only work if the FTP server has
# been compiled with --with-peruserlimits (and this is the case on
# most binary distributions) .
# The format is : :
# For instance, 3:20 means that the same authenticated user can have 3 active
# sessions max. And there are 20 anonymous sessions max.

# PerUserLimits            3:20



# This option can accept three values :
# 0 : disable SSL/TLS encryption layer (default).
# 1 : accept both traditional and encrypted sessions.
# 2 : refuse connections that don't use SSL/TLS security mechanisms,
#     including anonymous sessions.
# Do _not_ uncomment this blindly. Be sure that :
# 1) Your server has been compiled with SSL/TLS support (--with-tls),
# 2) A valid certificate is in place,
# 3) Only compatible clients will log in.

# TLS                      1


/pre>