VSFTPD.CONF(5) File Formats Manual VSFTPD.CONF(5) (NAME) vsftpd.conf - vsftpd (DESCRIPTION) vsftpd.conf vsftpd . vsftpd /etc/vsftpd.conf . vsftpd . vsftpd . inetd xinetd vsftpd (virtual host) . (FORMAT) vsftpd.conf . . # . : option=value option = value . . (BOOLEAN OPTIONS) . YES NO . allow_anon_ssl ssl_enable . YES SSL . : NO anon_mkdir_write_enable YES . write_enable ftp . : NO anon_other_write_enable YES . . : NO anon_upload_enable YES . write_enable ftp . ( ) . : NO anon_world_readable_only (world readable) . ftp . : YES anonymous_enable . ftp anonymous . : YES ascii_download_enable ASCII . : NO ascii_upload_enable ASCII . : NO async_abor_enable FTP "async ABOR" . FTP . . FTP . : NO background vsftpd "listen" vsftpd vsftpd . : NO check_shell ! -PAM vsftpd . vsftpd /etc/shells . : YES chmod_enable SITE CHMOD . ! . SITE CHMOD . : YES chown_uploads chown_username . . : NO chroot_list_enable chroot() . chroot_local_user YES . chroot() . /etc/vsftpd.chroot_list chroot_list_file . : NO chroot_local_user YES ( ) chroot() . : (shell) . . vsftpd FTP chroot() . : NO connect_from_port_20 PORT (ftp-data) . . vsftpd . : NO ( ) debug_ssl (true) OpenSSL vsftpd . ( 2.0.6). : NO delete_failed_uploads (true) . ( 2.0.7). : NO deny_email_enable . /etc/vsftpd.banned_emails banned_email_file . : NO dirlist_enable NO (permission denied) . : YES dirmessage_enable . .message message_file . : NO ( ) download_enable NO (permission denied) . : YES dual_log_enable /var/log/xferlog /var/log/vsftpd.log . wu-ftpd . vsftpd . : NO force_dot_files . "a" . "." ".." . : NO force_anon_data_ssl ssl_enable . SSL . : NO force_anon_logins_ssl ssl_enable . SSL . : NO force_local_data_ssl ssl_enable . SSL . : YES force_local_logins_ssl ssl_enable . SSL . : YES guest_enable "" (guest) . guest_username . : NO hide_ids "ftp" . : NO implicit_ssl SSL ( FTPS). SSL (explicit SSL) / vsftpd . : NO listen vsftpd (standalone) . vsftpd inetd . vsftpd . vsftpd . : NO listen_ipv6 listen vsftpd IPv4 IPv6 . listen (mutually exclusive) . : NO local_enable . /etc/passwd ( PAM ) . . : NO lock_upload_files . . ! ( ). : YES log_ftp_protocol FTP xferlog_std_format . . : NO ls_recurse_enable "ls -R" . ls -R . : NO mdtm_write MDTM ( ). : YES no_anon_password vsftpd . : NO no_log_lock vsftpd . Solaris / Veritas (hang) . : NO one_process_model . . . . : NO passwd_chroot_enable chroot_local_user chroot() . chroot /etc/passwd . /./ chroot . : NO pasv_addr_resolve pasv_address IP (hostname) YES . : NO pasv_enable PASV NO . : YES pasv_promiscuous PASV ( IP ) YES . ! FXP . : NO port_enable PORT NO . : YES port_promiscuous PORT ( ) YES . ! : NO require_cert YES SSL . validate_cert . ( 2.0.6). : NO require_ssl_reuse YES SSL SSL (session reuse) ( ). FTP . http://scarybeastsecurity.blogspot.com/2009/02/vsftpd-210-released.html . ( 2.1.0). : YES run_as_launching_user vsftpd YES . (root) . ! . vsftpd / chroot ( ). deny_file {/*,*..*} chroot . . . . : NO secure_email_list_enable YES . . email_password_file . . /etc/vsftpd.email_passwords . : NO session_support vsftpd . vsftpd utmp wtmp . PAM pam_session . vsftpd / . - utmp wtmp PAM . : NO setproctitle_enable vsftpd . vsftpd ( ). . : NO ssl_enable vsftpd OpenSSL vsftpd SSL . ( ) . SSL . !! . vsftpd OpenSSL . OpenSSL . : NO ssl_request_cert vsftpd SSL ( require_cert ). IBM zOS . ( 2.0.7). : YES ssl_sslv2 ssl_enable . SSL v2 . TLS v1.2 . : NO ssl_sslv3 ssl_enable . SSL v3 . TLS v1.2 . : NO ssl_tlsv1 ssl_enable . TLS v1.0 . TLS v1.2 . : NO ssl_tlsv11 ssl_enable . TLS v1.1 . TLS v1.2 . : NO ssl_tlsv12 ssl_enable . TLS v1.2 . TLS v1.2 . : YES ssl_tlsv13 ssl_enable . TLS v1.3 . TLS v1.2 . : YES strict_ssl_read_eof SSL SSL EOF . TCP FIN . . ( 2.0.7). : NO strict_ssl_write_shutdown SSL SSL EOF . FTP . . . ( 2.0.7). : NO syslog_enable /var/log/vsftpd.log (syslog) . (facility) FTPD . : NO tcp_wrappers vsftpd tcp_wrappers tcp_wrappers . IP . tcp_wrappers VSFTPD_LOAD_CONF vsftpd vsftpd . : NO text_userdb_names . . . : NO tilde_user_enable vsftpd ~chris/pics ( ~ ) . vsftpd ~ ~/something ( ~ ). ~user /etc/passwd chroot() ** . : NO use_localtime vsftpd . GMT . MDTM FTP . : NO use_sendfile sendfile() . : YES userlist_deny userlist_enable . NO userlist_file . . : YES userlist_enable vsftpd userlist_file . . (cleartext) . userlist_deny . : NO validate_cert YES SSL . (self-signed) . ( 2.0.6). : NO virtual_use_local_privs . ( ). : NO write_enable FTP . : STOR DELE RNFR RNTO MKD RMD APPE SITE. : NO xferlog_enable . /var/log/vsftpd.log vsftpd_log_file . : NO ( ) xferlog_std_format xferlog ( wu-ftpd ) . . . /var/log/xferlog xferlog_file . : NO (NUMERIC OPTIONS) . . () umask . 0 . accept_timeout PASV . : 60 anon_max_rate . : 0 () anon_umask umask . ! "0" ! : 077 chown_upload_mode (mode) (chown ) . ( 2.0.6). : 0600 connect_timeout PORT. : 60 data_connection_timeout . () . : 300 delay_failed_login . : 1 delay_successful_login . : 0 file_open_mode . umask . 0777 . : 0666 ftp_data_port PORT ( connect_from_port_20 ). : 20 idle_session_timeout FTP . . : 300 listen_port vsftpd FTP . : 21 local_max_rate . : 0 () local_umask umask . ! "0" ! : 077 max_clients vsftpd . . : 0 () max_login_fails . : 3 max_per_ip vsftpd (IP) . . : 0 () pasv_max_port PASV . . : 0 ( ) pasv_min_port PASV . . : 0 ( ) trans_chunk_size 8192 . : 0 ( vsftpd ) (STRING OPTIONS) () . anon_root vsftpd . . : () banned_email_file . deny_email_enable . : /etc/vsftpd.banned_emails banner_file . ftpd_banner . : () ca_certs_file (CA) . TLSv1.0 FTP z/OS . CA SSL vsftpd (chroot) . ( 2.0.6). : () chown_username . chown_uploads . : root chroot_list_file chroot() . chroot_list_enable . chroot_local_user ** chroot() . : /etc/vsftpd.chroot_list cmds_allowed FTP ( . USER PASS QUIT ). . FTP . : cmds_allowed=PASV,RETR,QUIT : () cmds_denied FTP ( . USER PASS QUIT ). cmds_allowed . ( 2.1.0). : () deny_file ( ) . ( ) . - . . ( ) . hide_file hide_file . vsftpd . . . * ? {,} . regex a/b/? a/?/c . : deny_file={*.mp3,*.mov,.private} : () dsa_cert_file DSA SSL . : ( - RSA ) dsa_private_key_file DSA SSL . . : () email_password_file secure_email_list_enable . : /etc/vsftpd.email_passwords ftp_username FTP . FTP . : ftp ftpd_banner vsftpd . : ( - vsftpd ) guest_username guest_enable . . : ftp hide_file ( ) . / . hide_file hide_file . vsftpd . deny_file . : hide_file={*.mp3,.hidden,hide*,h?} : () listen_address vsftpd ( ) . IP . : () listen_address6 listen_address IPv6 ( listen_ipv6 ) . IPv6 . : () local_root vsftpd ( ) . . : () message_file . . dirmessage_enable . : .message nopriv_user vsftpd . nobody. nobody . : nobody pam_service_name PAM vsftpd . : ftp pasv_address IP vsftpd PASV . IP pasv_addr_resolve DNS . : ( - ) rsa_cert_file RSA SSL . : /usr/share/ssl/certs/vsftpd.pem rsa_private_key_file RSA SSL . . : () secure_chroot_dir . ftp . vsftpd chroot() . : /var/empty ssl_ciphers SSL vsftpd SSL . ciphers . . : DES-CBC3-SHA ssl_sni_hostname SSL SNI . : () user_config_dir . : user_config_dir /etc/vsftpd_user_conf "chris" vsftpd /etc/vsftpd_user_conf/chris . ! . . listen_address banner_file max_per_ip max_clients xferlog_file . : () user_sub_token . . guest_username /home/virtual/$USER user_sub_token $USER fred ( chroot ) /home/virtual/fred . local_root user_sub_token . : () userlist_file userlist_enable . : /etc/vsftpd.user_list vsftpd_log_file vsftpd . xferlog_enable xferlog_std_format . dual_log_enable . : syslog_enable . : /var/log/vsftpd.log xferlog_file wu-ftpd . xferlog_enable xferlog_std_format . dual_log_enable . : /var/log/xferlog (SEE ALSO) vsftpd(8) (AUTHORS) scarybeasts@gmail.com VSFTPD.CONF(5)