ftp.config ========== .. raw:: html
Placeholder identifier. Not used as there is only one.
TCP port number on which the FTP service listens for incoming connections.
Value must be greater or equal to 1 and lesser or equal to 65535
Maximum number of simultaneous client connections allowed.
Value must be greater or equal to 1 and lesser or equal to 10000
Maximum number of connections allowed from a single IP address. 0 means unlimited.
Value must be greater or equal to 0 and lesser or equal to 1000
Maximum number of failed login attempts before blocking an IP address. 0 disables this limit.
Value must be greater or equal to 0 and lesser or equal to 1000
Idle timeout in seconds before disconnecting inactive clients. 0 disables timeout.
Value must be greater or equal to 0 and lesser or equal to 10000
Timeout in seconds for clients that connect but do not transfer data. 0 disables timeout.
Value must be greater or equal to 0 and lesser or equal to 10000
Whether to allow only anonymous FTP access, disabling authenticated user login.
Filesystem path for anonymous FTP users. null to use the default anonymous FTP directory.
Whether to allow only local system users to login, disabling anonymous access.
Welcome message displayed to FTP clients upon connection.
Default Unix permissions (umask) for files created by FTP users.
Default Unix permissions (umask) for directories created by FTP users.
Whether to enable File eXchange Protocol (FXP) for server-to-server transfers.
Whether to allow clients to resume interrupted file transfers.
Whether to restrict users to their home directories (chroot jail).
Whether to perform RFC 1413 ident lookups on connecting clients.
Whether to perform reverse DNS lookups on client IP addresses for logging.
Public IP address to advertise to clients for passive mode connections when behind NAT.
Minimum port number for passive mode data connections. Must be 0 or between 1024-65535.
Maximum port number for passive mode data connections. Must be 0 or between 1024-65535.
Maximum upload bandwidth in KiB/s for local users. 0 means unlimited.
Value must be greater or equal to 0
Maximum download bandwidth in KiB/s for local users. 0 means unlimited.
Value must be greater or equal to 0
Maximum upload bandwidth in KiB/s for anonymous users. 0 means unlimited.
Value must be greater or equal to 0
Maximum download bandwidth in KiB/s for anonymous users. 0 means unlimited.
Value must be greater or equal to 0
Whether to enable TLS/SSL encryption for FTP connections.
TLS policy for connections. Values include: "on" (required), "off" (disabled), "data" (data only),     "auth" (authentication only), "ctrl" (control only), or combinations with + and ! modifiers.
Whether to allow TLS clients to initiate renegotiation of the TLS connection.
Whether to allow .ftpaccess files to override TLS requirements for specific users.
Whether to allow per-user TLS configuration overrides.
Whether to require client certificates to have a Common Name field.
Whether to enable detailed TLS diagnostic logging.
Whether to export client certificate data to environment variables.
Whether to disable empty TLS record fragments to improve compatibility with some clients. Disabling increases vulnerability to some attack vectors.
Whether to disable the requirement for TLS session reuse.
Whether to export standard TLS environment variables for use by external programs.
Whether to require client certificates to contain a DNS name in the Subject Alternative Name extension.     The reversedns setting must also be enabled.
Whether to require client certificates to contain an IP address in the Subject Alternative Name extension.
ID of the certificate to use for TLS/SSL connections. null to use the default system certificate.
Additional ProFTPD configuration directives to include in the server configuration. Manual directives may render the FTP service non-functional and should be used with caution.