File: sftp_config

package info (click to toggle)
mysecureshell 2.0-2
  • links: PTS, VCS
  • area: main
  • in suites: bookworm, bullseye, buster, sid, stretch
  • size: 828 kB
  • ctags: 784
  • sloc: ansic: 7,421; sh: 709; perl: 264; makefile: 118
file content (89 lines) | stat: -rw-r--r-- 3,521 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
## MySecureShell Configuration File ##
# To get more informations on all possible options, please look at the doc:
# http://mysecureshell.readthedocs.org

#Default rules for everybody
<Default>
	GlobalDownload		50k	#total speed download for all clients
					# o -> bytes   k -> kilo bytes   m -> mega bytes
	GlobalUpload		0	#total speed download for all clients (0 for unlimited)
	Download 		5k	#limit speed download for each connection
	Upload 			0	#unlimit speed upload for each connection
	StayAtHome		true	#limit client to his home
	VirtualChroot		true	#fake a chroot to the home account
	LimitConnection		10	#max connection for the server sftp
	LimitConnectionByUser	1	#max connection for the account
	LimitConnectionByIP	2	#max connection by ip for the account
	Home			/home/$USER	#overrite home of the user but if you want you can use
						#	environment variable (ie: Home /home/$USER)
	IdleTimeOut		5m	#(in second) deconnect client is idle too long time
	ResolveIP		true	#resolve ip to dns
#	IgnoreHidden		true	#treat all hidden files as if they don't exist
#	DirFakeUser		true	#Hide real file/directory owner (just change displayed permissions)
#	DirFakeGroup		true	#Hide real file/directory group (just change displayed permissions)
#	DirFakeMode		0400	#Hide real file/directory rights (just change displayed permissions)
					#Add execution right for directory if read right is set
	HideNoAccess		true	#Hide file/directory which user has no access
#	MaxOpenFilesForUser	20	#limit user to open x files on same time
#	MaxWriteFilesForUser	10	#limit user to x upload on same time
#	MaxReadFilesForUser	10	#limit user to x download on same time
	DefaultRights		0640 0750	#Set default rights for new file and new directory
#	MinimumRights		0400 0700	#Set minimum rights for files and dirs

	ShowLinksAsLinks	false	#show links as their destinations
#	ConnectionMaxLife	1d	#limits connection lifetime to 1 day

#	Charset			"ISO-8859-15"	#set charset of computer
</Default>

#Rules only for group ftp
#<Group ftp>
#	Download	25 k/s
#	LogFile		/var/log/sftp-server_ftp.log	#Change logfile
#	ExpireDate	"2007-02-28 18:31:01"
#</Group>

#<Group sftp_administrator>
#	IsAdmin		true		#can admin the server
#	VirtualChroot	false		#you must disable chroot to have a full support of admin
#	StayAtHome	true
#	IdleTimeOut	0
#</Group>

#<Group old_client>
#	SftpProtocol		3	#force protocol SFTP
#	DisableAccount		true	#disable account
#</Group>

#Rules only for group ftpnolimit
#<Group ftpnolimit>
#	Download		0	#0 = unlimited
#	IdleTimeOut		0	#no timeout
#	DirFakeUser		false	#show real user on file/directory
#	DirFakeGroup		false	#show real group on file/directory
#	DirFakeMode		0	#show real rights on file/directory
#	MaxReadFilesForUser	0	#0 = unlimited but still have the restriction MaxOpenFilesForUser
#</Group>

#<IpRange 192.168.0.1-192.168.0.5>
#	ByPassGlobalDownload	true	#bypass GlobalDownload restriction
#	ByPassGlobalUpload	true	#bypass GlobalUpload restriction
#	Download		0
#	DisableAccount		false	#enable account
#	IdleTimeOut		0	#disable timeout
#	LimitConnectionByIP	0	#no limit
#</IpRange>

#<Group trusted_users>
#	Shell		/bin/tcsh	#give a shell access to TRUSTED clients !!!
#</Group>

#<VirtualHost *:22> 
#	DirFakeUser	false	#show real user on file/directory
#	DirFakeGroup	false	#show real group on file/directory
#	DirFakeMode	0	#show real rights on file/directory
#	HideNoAccess	false
#	IgnoreHidden	false
#</VirtualHost>

#Include /etc/my_sftp_config_file	#include this valid configuration file