由 happy2000mt 在 11-24-2003 20:16 发表:

限止最大在线和每IP联接书目~~

max_clients=数字

max_per_ip=数字

这两个命令不起作用阿~~~~

我设置了max_per_ip=1 但是实际上并没有作限止```

已经重起服务器了,还是不行

我的配置~~~~

anonymous_enable=YES

max_clients=20

max_per_ip=1

local_enable=YES

anon_umask=022

local_umask=022

write_enable=YES

pasv_enable=YES

pasv_min_port=0

pasv_max_port=0

local_umask=022

anon_max_rate=100000

local_max_rate=200000000000

anon_upload_enable=YES

user_config_dir=/etc/vsftpd/userconf

anon_mkdir_write_enable=YES

dirmessage_enable=YES

xferlog_enable=YES

Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES

If you want, you can arrange for uploaded anonymous files to be owned by

a different user. Note! Using "root" for uploaded files is not

recommended!

#chown_uploads=YES

#chown_username=whoever

You may override where the log file goes if you like. The default is shown

below.

#xferlog_file=/var/log/vsftpd.log

If you want, you can have your log file in standard ftpd xferlog format

xferlog_std_format=YES

You may change the default value for timing out an idle session.

idle_session_timeout=600

You may change the default value for timing out a data connection.

data_connection_timeout=120

It is recommended that you define on your system a unique user which the

ftp server can use as a totally isolated and unprivileged user.

#nopriv_user=ftpsecure

Enable this and the server will recognise asynchronous ABOR requests. Not

recommended for security (the code is non-trivial). Not enabling it,

however, may confuse older FTP clients.

#async_abor_enable=YES

By default the server will pretend to allow ASCII mode but in fact ignore

the request. Turn on the below options to have the server actually do ASCII

mangling on files when in ASCII mode.

Beware that turning on ascii_download_enable enables malicious remote parties

to consume your I/O resources, by issuing the command "SIZE /big/file" in

ASCII mode.

These ASCII options are split into upload and download because you may wish

to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),

without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be

on the client anyway..

#ascii_upload_enable=YES

#ascii_download_enable=YES

ftpd_banner=Welcome to Fedora FTP service By Heguojun.

You may specify a file of disallowed anonymous e-mail addresses. Apparently

useful for combatting certain DoS attacks.

#deny_email_enable=YES

(default follows)

#banned_email_file=/etc/

限止最大在线和每IP联接书目~~