Find the answer to your Linux question:
Results 1 to 2 of 2
How can I configure proFTPd to deny all unless: User is part of group: ftpguys Client IP matches either: 1.1.1.1 or 2.2.2.2 or 3.3.3.3 I already have the config file ...
  1. #1
    Just Joined!
    Join Date
    Jun 2008
    Posts
    33

    proFTPd deny all except certain IP Addresses

    How can I configure proFTPd to deny all unless:

    • User is part of group: ftpguys
    • Client IP matches either: 1.1.1.1 or 2.2.2.2 or 3.3.3.3


    I already have the config file (proftpd.conf) setup to only allow users who are part of the group ftpguys. To do that I use this:

    Code:
    <Limit LOGIN>
    AllowGroup ftpguys
    DenyALL
    </Limit>
    The above works very well, but I want to also specify three IP's that are allowed to login, nobody else. I've tried this but I did not work:

    Code:
    <Limit LOGIN>
    Order Deny,Allow
    Deny from all
    Allow from 1.1.1.1
    </Limit>
    Any ideas? Thanks in advance

  2. #2
    Just Joined!
    Join Date
    Jun 2008
    Posts
    33
    I think I have cracked it though... after trying every possible combination of syntax I could dream up I think I finally got it. This is what I have that appears to work:

    Code:
    <Limit LOGIN>
    Deny from all
    Allow from 1.1.1.1
    Allow from 2.2.2.2
    Allow from 3.3.3.3
    </Limit>
    
    <Limit LOGIN>
    Deny from all
    AllowGroup ftpguys
    </Limit>
    Any thoughts?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
...