#Exampleconfigfile/etc/vsftpd.conf
#
#Thedefaultcompiledinsettingsarefairlyparanoid.Thissamplefile
#loosensthingsupabit,tomaketheftpdaemonmoreusable.
#Pleaseseevsftpd.conf.5forallcompiledindefaults.
#
#READTHIS:ThisexamplefileisNOTanexhaustivelistofvsftpdoptions.
#Pleasereadthevsftpd.conf.5manualpagetogetafullideaofvsftpd's
#capabilities.
#
#
#Runstandalone?vsftpdcanruneitherfromaninetdorasastandalone
#daemonstartedfromaninitscript.
listen=YES
#
#RunstandalonewithIPv6?
#Likethelistenparameter,exceptvsftpdwilllistenonanIPv6socket
#insteadofanIPv4one.Thisparameterandthelistenparameteraremutually
#exclusive.
#listen_ipv6=YES
#
#AllowanonymousFTP?(Beware-allowedbydefaultifyoucommentthisout).
anonymous_enable=YES
#
#Uncommentthistoallowlocaluserstologin.
#local_enable=YES
#
#UncommentthistoenableanyformofFTPwritecommand.
#write_enable=YES
#
#Defaultumaskforlocalusersis077.Youmaywishtochangethisto022,
#ifyourusersexpectthat(022isusedbymostotherftpd's)
#local_umask=022
#
#UncommentthistoallowtheanonymousFTPusertouploadfiles.Thisonly
#hasaneffectiftheaboveglobalwriteenableisactivated.Also,youwill
#obviouslyneedtocreateadirectorywritablebytheFTPuser.
#anon_upload_enable=YES
#
#UncommentthisifyouwanttheanonymousFTPusertobeabletocreate
#newdirectories.
#anon_mkdir_write_enable=YES
#
#Activatedirectorymessages-messagesgiventoremoteuserswhenthey
#gointoacertaindirectory.
dirmessage_enable=YES
#
#Activateloggingofuploads/downloads.
xferlog_enable=YES
#
#MakesurePORTtransferconnectionsoriginatefromport20(ftp-data).
connect_from_port_20=YES
#
#Ifyouwant,youcanarrangeforuploadedanonymousfilestobeownedby
#adifferentuser.Note!Using"root"foruploadedfilesisnot
#recommended!
#chown_uploads=YES
#chown_username=whoever
#
#Youmayoverridewherethelogfilegoesifyoulike.Thedefaultisshown
#below.
#xferlog_file=/var/log/vsftpd.log
#
#Ifyouwant,youcanhaveyourlogfileinstandardftpdxferlogformat
#xferlog_std_format=YES
#
#Youmaychangethedefaultvaluefortimingoutanidlesession.
#idle_session_timeout=600
#
#Youmaychangethedefaultvaluefortimingoutadataconnection.
#data_connection_timeout=120
#
#Itisrecommendedthatyoudefineonyoursystemauniqueuserwhichthe
#ftpservercanuseasatotallyisolatedandunprivilegeduser.
#nopriv_user=ftpsecure
#
#EnablethisandtheserverwillrecogniseasynchronousABORrequests.Not
#recommendedforsecurity(thecodeisnon-trivial).Notenablingit,
#however,mayconfuseolderFTPclients.
#async_abor_enable=YES
#
#BydefaulttheserverwillpretendtoallowASCIImodebutinfactignore
#therequest.TurnonthebelowoptionstohavetheserveractuallydoASCII
#manglingonfileswheninASCIImode.
#BewarethatonsomeFTPservers,ASCIIsupportallowsadenialofservice
#attack(DoS)viathecommand"SIZE/big/file"inASCIImode.vsftpd
#predictedthisattackandhasalwaysbeensafe,reportingthesizeofthe
#rawfile.
#ASCIImanglingisahorriblefeatureoftheprotocol.
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
#Youmayfullycustomisetheloginbannerstring:
#ftpd_banner=WelcometoblahFTPservice.
#
#Youmayspecifyafileofdisallowedanonymouse-mailaddresses.Apparently
#usefulforcombattingcertainDoSattacks.
#deny_email_enable=YES
#(defaultfollows)
#banned_email_file=/etc/vsftpd.banned_emails
#
#Youmayrestrictlocaluserstotheirhomedirectories.SeetheFAQfor
#thepossiblerisksinthisbeforeusingchroot_local_useror
#chroot_list_enablebelow.
#chroot_local_user=YES
#
#Youmayspecifyanexplicitlistoflocaluserstochroot()totheirhome
#directory.Ifchroot_local_userisYES,thenthislistbecomesalistof
#userstoNOTchroot().
#chroot_list_enable=YES
#(defaultfollows)
#chroot_list_file=/etc/vsftpd.chroot_list
#
#Youmayactivatethe"-R"optiontothebuiltinls.Thisisdisabledby
#defaulttoavoidremoteusersbeingabletocauseexcessiveI/Oonlarge
#sites.However,somebrokenFTPclientssuchas"ncftp"and"mirror"assume
#thepresenceofthe"-R"option,sothereisastrongcaseforenablingit.
#ls_recurse_enable=YES
#
#
#Debiancustomization
#
#Someofvsftpd'ssettingsdon'tfittheDebianfilesystemlayoutby
#default.ThesesettingsaremoreDebian-friendly.
#
#Thisoptionshouldbethenameofadirectorywhichisempty.Also,the
#directoryshouldnotbewritablebytheftpuser.Thisdirectoryisused
#asasecurechroot()jailattimesvsftpddoesnotrequirefilesystem
#access.
secure_chroot_dir=/var/run/vsftpd
#
#ThisstringisthenameofthePAMservicevsftpdwilluse.
pam_service_name=vsftpd
#
#ThisoptionspecifiesthelocationoftheRSAcertificatetouseforSSL
#encryptedconnections.
rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
#ThisoptionspecifiesthelocationoftheRSAkeytouseforSSL
#encryptedconnections.
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key