From owner-freebsd-questions  Mon Mar 17 12:59:35 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 38E3337B401
	for <questions@freebsd.org>; Mon, 17 Mar 2003 12:59:33 -0800 (PST)
Received: from srv.flncs.com (srv.flncs.com [12.27.148.74])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8BAFE43F3F
	for <questions@freebsd.org>; Mon, 17 Mar 2003 12:59:32 -0800 (PST)
	(envelope-from moti@flncs.com)
Message-ID: <3E763776.70808@flncs.com>
Date: Mon, 17 Mar 2003 16:00:38 -0500
From: Moti Levy <moti@flncs.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3b) Gecko/20030210
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: "Defryn, Guy" <G.P.Defryn@massey.ac.nz>
Cc: questions@freebsd.org
Subject: Re: ftp best practices
References: <9EA1E9775D329F4CB45B259FCA43F79F48B1FF@its-xchg3.massey.ac.nz>
In-Reply-To: <9EA1E9775D329F4CB45B259FCA43F79F48B1FF@its-xchg3.massey.ac.nz>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Defryn, Guy wrote:
> 
> I am setting up a webserver and I would like some opinions on this.
> 
> I have created a partition for the sites and create a directory for each
> site. Then I create a user account and set the website folder as the
> home directory for that user. The user can now ftp in his directory and
> upload files.
> 
> 
> One thing I would like to prevent is the visibility of the config files
> in the directory. I tried setting the shell to nonexistent but ftp does
> not seem to allow that.
> 
> 
> Cheers
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 
> 

I use proftpd in daemon mode .
with these :
Umask                   002
<Global>
         AllowOverwrite  yes
         <Limit ALL SITE_CHMOD>
                 AllowAll
         </Limit>
</Global>
#limit users to their home dir
DefaultRoot             ~

UseReverseDNS           off
MaxLoginAttempts        3
RequireValidShell       no
LsDefaultOptions        "-a"
TimeoutNoTransfer       900
IdentLookups            off
AllowRetrieveRestart    on
AllowStoreRestart       on
#hide files with no access to user
HideNoAccess		on


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message