You are not logged in.

#1 2009-09-15 11:29:40

opotonil
Member
Registered: 2009-09-12
Posts: 34

[vsftpd] VSFTPD_LOAD_CONF - configuration per IP not working

Hi,

I'm trying to use diferent configuration file per IP. From man vsftpd.conf:

tcp_wrappers
              If enabled, and vsftpd was compiled with tcp_wrappers support, incoming connections will be fed through tcp_wrappers access  control. Fur‐thermore,  there  is  a  mechanism for per-IP based configuration. If tcp_wrappers sets the VSFTPD_LOAD_CONF environment variable, then the vsftpd session will try and load the vsftpd configuration file specified in this variable.
              Default: NO

More info:
  - ftp://vsftpd.beasts.org/users/cevans/un … _IP_CONFIG
  - http://www.muug.mb.ca/tutorials/vsftpd-class.html

/etc/hosts.allow

vsftpd: 192.168.0.0/255.255.255.0: setenv VSFTPD_LOAD_CONF /etc/vsftpd_local.conf
vsftpd: ALL

/etc/vsftpd.conf and /etc/vsftpd_local.conf (for try is the same configuration)

listen=YES                                                                 
listen_address=192.168.1.2                                                 
tcp_wrappers=YES
anonymous_enable=YES
anon_root=/srv/ftp/anonymous
local_enable=NO
write_enable=NO
anon_upload_enable=NO
anon_mkdir_write_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
nopriv_user=nobody
ascii_download_enable=YES

When connect from 192.168.0.2 response is "500 OOPS: child died", if comment "vsftpd: 192.168.0.0/255.255.255.0: setenv VSFTPD_LOAD_CONF /etc/vsftpd_local.conf" works. Testing runs from http://www.wormly.com/test_ftp_server

The same configuration works on Debian. Sorry for my English and thanks.

Last edited by opotonil (2009-09-15 12:08:04)

Offline

#2 2009-09-17 17:51:42

opotonil
Member
Registered: 2009-09-12
Posts: 34

Re: [vsftpd] VSFTPD_LOAD_CONF - configuration per IP not working

Hi.

I have also noticed that not allowed to use CDIR, on "hosts.allow", Debian allows. I do not know if it is correct.

Thanks.

Offline

Board footer

Powered by FluxBB