How to deny upload in proftpd

Question

I have the directory: /home/ftp/download.

I would like to allow only downloading from this directory i proftpd.

I used the following config but it doesn't work:

<Directory /home/ftp/download/>
   <Limit STOR STOU>
       DenyAll
   </Limit>    
</Directory>

STOR = (Transfer a file from the client to the server)

Any idea?

score 0 · Answer 1 · answered Jan 14 '14 at 15:59

0

Assuming your other config and file permissions are correctly mapped, this should allow to download, but no upload.

Directory /home/ftp/download/>
    <Limit READ>
       AllowAll
   </Limit>    
   <Limit STOR STOU>
       DenyAll
   </Limit>    
</Directory>

answered Jan 14 '14 at 15:59

Danila Ladner

No! I can still upload files to /home/ftp/download. Maybe a need to chmod /download with a specific way. – Oualid Jan 14 '14 at 16:07
what if you change the order? – Danila Ladner Jan 14 '14 at 16:09
No difference. It doesn't work because maybe i am using FTP+SSL, SFTP. – Oualid Jan 14 '14 at 16:23
And if you try to add `WRITE` in block `DenyAll` ? – krisFR Jan 14 '14 at 16:27
It doesn't matter. Can you pastebin the config? It is hard to troubleshoot something so blindly. – Danila Ladner Jan 14 '14 at 16:28
What do you mean by pastebin? – Oualid Jan 14 '14 at 16:33
just paste the config to some online paste tool http://pastbin.ca for exmaple, remove all security related info and then paste the link what pastebin.ca will give you. – Danila Ladner Jan 14 '14 at 16:45
Here: http://pastebin.com/Kf1xU6Z2 – Oualid Jan 14 '14 at 16:58
Ok, so with DenyAll you still are able to upload? Also what if you remove slash after "download" like ""? – Danila Ladner Jan 14 '14 at 18:16
Doesn't matter. – Oualid Jan 14 '14 at 20:15

score 0 · Accepted Answer · answered Jan 15 '14 at 08:02

0

I run sftp and not ftp.

sftp runs by openssh.

ftp runs by proftpd.

The changes didn't take effect because I run sftp and not ftp in the ftp client.

answered Jan 15 '14 at 08:02

Oualid

2 Answers2