# Runs standalone
listen=YES
# Listening port (default : 21)
listen_port=21
#
# Passive mode support
pasv_enable=YES
pasv_min_port=26000
pasv_max_port=26010
pasv_address=xxx.xxx.xxx.xxx
pasv_promiscuous=YES
port_promiscuous=YES
#
#
# SSL Support
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=YES
#
ssl_tlsv1=NO
ssl_sslv2=YES
ssl_sslv3=YES
#
rsa_cert_file=/etc/pki/tls/certs/vsftpd.pem
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=NO
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=000
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=NO
#
# You may override where the log file goes if you like. The default is shown
# below.
vsftpd_log_file=/opt/var/log/vsftpd.log
#
#
# You may fully customise the login banner string:
ftpd_banner="Welcome"
#
chroot_local_user=YES
secure_chroot_dir=/share/Publique/FTP
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
# the presence of the "-R" option, so there is a strong case for enabling it.
ls_recurse_enable=YES