vsftpd.conf

anonymous_enable=NO
dirlist_enable=YES
download_enable=YES

# Virtual users will use the same privileges as local users.
# It will grant write access to virtual users. Virtual users will use the
# same privileges as anonymous users, which tends to be more restrictive
# (especially in terms of write access).
virtual_use_local_privs=YES
write_enable=YES
local_enable=YES
guest_enable=YES

# the PAM file used by authentication of virtual users
pam_service_name=vsftpd.virtual

# specifies a home directory for each virtual user
user_sub_token=$USER
local_root=/var/www/virtual/$USER

# the virtual user is restricted to the virtual FTP area
chroot_local_user=YES

# hides the FTP server user IDs and just display "ftp" in directory listings
hide_ids=YES


xferlog_std_format=NO
xferlog_enable=YES
vsftpd_log_file=/var/log/vsftpd.log

#Turn on verbose vsftpd log format.
#The default vsftpd log file is /var/log/vsftpd.log:
log_ftp_protocol=YES

# runs vsftpd in standalone mode
listen=YES
# listens on this port for incoming FTP connections
listen_port=990
listen_port=21

pasv_enable=YES
pasv_min_port=60000
pasv_max_port=60010
pasv_promiscuous=YES
pasv_addr_resolve=NO
#pasv_address=[WAN IP]
#port_promiscuous=YES
#port_enable=YES

# controls whether PORT style data connections use port 20 (ftp-data)
connect_from_port_20=YES

#file_open_mode=0666

# the umask for file creation
local_umask=0022

ssl_enable=YES
allow_anon_ssl=NO
#force_local_data_ssl=NO
#force_local_logins_ssl=YES
require_ssl_reuse=NO
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO

debug_ssl=YES

rsa_cert_file=/etc/vsftpd/vsftpd.pem
rsa_private_key_file=/etc/vsftpd/vsftpd.pem