From 4f61bba6aa25ce57a4e28bc14fc2208a1c193654 Mon Sep 17 00:00:00 2001
From: Michel Blockelet <Michel.Blockelet@crans.org>
Date: Fri, 19 Dec 2008 03:21:59 +0100
Subject: [PATCH] [proftpd] Configuration initiale

darcs-hash:20081219022159-ddb99-bb2e095c9d3c1aebf9e8e6c649ae6a12388398ba.gz
---
 Bundler/proftpd.xml             |  5 +++
 Metadata/groups.xml             |  2 +-
 Python/etc/proftpd/proftpd.conf | 80 +++++++++++++++++++++++++++++++++
 Rules/rules.xml                 |  2 +
 4 files changed, 88 insertions(+), 1 deletion(-)
 create mode 100644 Bundler/proftpd.xml
 create mode 100644 Python/etc/proftpd/proftpd.conf

diff --git a/Bundler/proftpd.xml b/Bundler/proftpd.xml
new file mode 100644
index 0000000..a649832
--- /dev/null
+++ b/Bundler/proftpd.xml
@@ -0,0 +1,5 @@
+<Bundle name="proftpd">
+  <ConfigFile name="/etc/proftpd/proftpd.conf"/>
+  <Package name="proftpd"/>
+  <Service name="proftpd"/>
+</Bundle>
diff --git a/Metadata/groups.xml b/Metadata/groups.xml
index 06f8d31..d523cbe 100644
--- a/Metadata/groups.xml
+++ b/Metadata/groups.xml
@@ -828,7 +828,7 @@
 
   <Group name="proftpd"
      category="ftp-server-backend">
-    <!-- TODO: a implementer -->
+    <Bundle name="proftpd"/>
   </Group>
 
   <Group name="vsftpd-federez"
diff --git a/Python/etc/proftpd/proftpd.conf b/Python/etc/proftpd/proftpd.conf
new file mode 100644
index 0000000..1dcac7d
--- /dev/null
+++ b/Python/etc/proftpd/proftpd.conf
@@ -0,0 +1,80 @@
+# -*- coding: utf-8; mode: python -*-
+
+include("ip")
+
+@#
+@# /etc/proftpd.conf -- This is a basic ProFTPD configuration file.
+@# To really apply changes reload proftpd after modifications.
+@# 
+@
+print 'ServerName         "%s"' % hostname
+@ServerType			standalone
+@DeferWelcome			off
+@
+@MultilineRFC2228		on
+@DefaultServer			on
+@ShowSymlinks			on
+@
+@TimeoutNoTransfer		600
+@TimeoutStalled			600
+@TimeoutIdle			1200
+@
+@DisplayLogin                    welcome.msg
+@DisplayFirstChdir               .message
+@ListOptions                	"-l"
+@
+@DenyFilter			\*.*/
+@
+@# Uncomment this if you are using NIS or LDAP to retrieve passwords:
+@#PersistentPasswd		off
+@
+@# Uncomment this if you would use TLS module:
+@#TLSEngine 			on
+@
+@# Uncomment this if you would use quota module:
+@#Quotas				on
+@
+@# Uncomment this if you would use ratio module:
+@#Ratios				on
+@
+@# Port 21 is the standard FTP port.
+@Port				21
+@
+@# To prevent DoS attacks, set the maximum number of child processes
+@# to 30.  If you need to allow more than 30 concurrent connections
+@# at once, simply increase this value.  Note that this ONLY works
+@# in standalone mode, in inetd mode you should use an inetd server
+@# that allows you to limit maximum number of processes per service
+@# (such as xinetd)
+@MaxInstances			3
+@
+@# Set the user and group that the server normally runs at.
+@User				nobody
+@Group				nogroup
+@
+@# Umask 022 is a good standard umask to prevent new files and dirs
+@# (second parm) from being group and world writable.
+@Umask				022  022
+@# Normally, we want files to be overwriteable.
+@AllowOverwrite			on
+@
+@# Delay engine reduces impact of the so-called Timing Attack described in
+@# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
+@# It is on by default. 
+@#DelayEngine 			off
+@
+@# A basic anonymous configuration, no upload directories.
+@
+@# Que ftp
+@<Limit LOGIN>
+@    Order Allow,Deny
+@    DenyAll
+@    AllowUser ftp
+@    Allow from tinybrother.adm.crans.org,littlebrother.adm.crans.org,bigbrother.adm.crans.org,hugebrother.crans.org
+@</Limit>
+@
+@<Anonymous ~ftp>
+@   User				ftp
+@   Group			nogroup
+@   RequireValidShell		off
+@</Anonymous>
diff --git a/Rules/rules.xml b/Rules/rules.xml
index 0003257..bd21d88 100644
--- a/Rules/rules.xml
+++ b/Rules/rules.xml
@@ -43,6 +43,8 @@
   <Directory name="/mirror/apt-mirror/skel" owner="apt-mirror" group="apt-mirror" perms="0755"/>
   <Directory name="/mirror/apt-mirror/mirror" owner="apt-mirror" group="apt-mirror" perms="0755"/>
   
+  <Service type="deb" name="proftpd" status="on"/>
+
   <Service type="deb" name="rsync" status="on"/>
 
   <Service type="deb" name="openntpd" status="on"/>