Ftp server 11.. PPrriinncciipplleess FTP stands for _F_i_l_e _T_r_a_n_s_f_e_r _P_r_o_t_o_c_o_l. It is widely used to publish file over the internet. 22.. BBaassiicc ccoonnffiigguurraattiioonn The FTP protocol is fairly old (more than 20 years) and many features were added. The wuftpd server supports quite a few of those. Today, there are many other file sharing protocol out there (HTTP + dynamic content) often offering more control and ease of use for clients. In general, ftp is used for basic file sharing. We will describe here the basic settings supported by this module. You may want to consult the man page _f_t_p_a_c_c_e_s_s to learn more. 22..11.. MMiisscc 22..11..11.. EEmmaaiill ooff aaddmmiinn You enter the email address of the administrator responsible for this server. This information is printed as part of the banner file. You must write one and include the magic sequence %E. The sequence will be replaced by the value entered in this field. 22..11..22.. GGuueesstt ggrroouuppss You enter a list of user groups considered guest. wuftpd has three independant settings for normal, guest and anonymous users. You may enter zero of more groups here separated by spaces. 22..11..33.. BBaannnneerr ffiillee This is the path of a text file (ASCII) presented everytime a user log in. You can edit the file using the _e_d_i_t _b_a_n_n_e_r button. 22..11..44.. SShhuuttddoowwnn mmeessssaaggee This specifies the path of a control file. If the file exists, the server will check the file regularly to see if the server is going to be shut down. If a shutdown is planned, the user is notified, new connections are denied after a specified time before shutdown and current connec tions are dropped at a specified time before shut down. The file is structured as follows: where +o is any year > 1970. +o 0-11 +o 0-23 +o 0-59 +o and are the offsets in HHMM format before the shutdown time that new connections will be denied and existing connections will be disconnected. +o follows the normal rules for any message and banner. with the following additional magic cookies available: +o %s time system is going to shut down. +o %r time new connections will be denied. +o %d time current connections will be dropped. All times are in the form: ddd MMM DD hh:mm:ss YYYY. The external program _f_t_p_s_h_u_t_(_8_) can be used to auto mate the process of generating this file. 22..11..55.. AAllllooww aannoonnyymmoouuss aacccceessss You can enable or disabled anonymous access using this check-box. If you enable anonymous access, make sure the anonftp package is installed. 22..22.. CCoonnttrrooll For the various access mode (user,guest,anonymous), you can limit the features available. Note that the ftp server generally execute with the same privilege as the user connected, so even if this user has a given privilege, the operating system may still limit his ability to perform the operation. Said differently, the FTP server may allow the user to _t_r_y or not an operation, but the operating system as the final say about the result. 22..22..11.. MMaayy rreeqquueesstt ccoommpprreesssseedd ffiillee A user may request a file with the extension .Z or .gz. If this file does not exist, but the corresponding file without the extension do exist, the server will compress it on the fly. 22..22..22.. MMaayy rreeqquueesstt ttaarr ffiilleess If a tar file (with extension .tar) is request, but only a corresponding directory exist, a TAR is produced on the fly. This allows the users to grab complete directories in a single command. 22..22..33.. MMaayy cchhmmoodd ffiilleess The user is allowed to change the permissions of a file. 22..22..44.. MMaayy ddeelleettee ffiilleess The user is allowed to delete files. 22..22..55.. MMaayy oovveerrwwrriittee ffiilleess The user is allowed to overwrite existing files. 22..22..66.. MMaayy rreennaammee ffiilleess The user is allowed to rename existing files. 22..22..77.. LLoogg iinnbboouunndd ttrraannssffeerrss For every file received, an entry is written in the transfer log. You can disable this behavior. 22..22..88.. LLoogg oouuttbboouunndd ttrraannssffeerrss For every file transmitted, an entry is written in the transfer log. You can disable this behavior. 22..33.. TTiimmeeoouuttss You control various timeout for the various operations done during a session. 22..33..11.. AAcccceepptt ccoonnnneeccttiioonn ((ddeeffaauulltt 112200 sseeccoonnddss)) How long the daemon will wait for an incoming (PASV) data connection. 22..33..22.. PPOORRTT ccoonnnneeccttiioonn ((ddeeffaauulltt 112200 sseeccoonnddss)) How long the daemon will wait attempting to establish an outgoing (PORT) data connection. This effects the actual connetion attempt. The daemon makes several attempts, sleeping a while between each, before completely giving up. 22..33..33.. DDaattaa ttrraannssffeerr ((ddeeffaauulltt 11220000 sseeccoonnddss)) How long the daemon will wait for some activity on the data connection. You should keep this long because the remote client may have a slow link and there can be quite a bit of data queued for the client. 22..33..44.. DDeeffaauulltt iiddllee ttiimmee ((ddeeffaauulltt 990000 sseeccoonnddss)) How long the daemon will wait for the next command. The default can also be overridden by the command line -a option. This access clause overrides both. 22..33..55.. MMaaxxiimmuumm iiddllee ttiimmee ((ddeeffaauulltt 11220000 sseeccoonnddss)) The SITE IDLE command allows the remote client to establish a higher value for the idle timeout. This sets the upper limit the client may request. The default can also be overrid den by the command line -A option. This access clause overrides both. 22..33..66.. AAuutthh//IIddeenntt ((ddeeffaauulltt 1100 sseeccoonnddss)) The maximum time the daemon allows for the entire RFC931 (AUTH/ident) con versation. Setting this to zero (0) completely dis ables the daemon's use of this protocol. The infor mation obtained via RFC931 is recorded in the system logs and not actually used in any authentication. 33.. VViirrttuuaall hhoossttss One Linux server may publish file for several logical host at once. From a client standpoint, there are several independant server. 44.. TTrraannssffeerr llooggss You can view reports for the activity on the main ftp server and each virtual host.