listen=YES
anonymous_enable=YES
local_enable=YES
write_enable=NO
local_umask=022
xferlog_enable=YES
connect_from_port_20=YES
listen_port=21
chown_username=nobody
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
idle_session_timeout=600
data_connection_timeout=120
nopriv_user=ftpsecure
ftpd_banner=Paissad FTP Service.
banner_file=/etc/vsftpd/vsftpd.banner_file
chroot_local_user=YES
chroot_list_file=/etc/vsftpd/vsftpd.chroot_list
#ls_recurse_enable=YES
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
##################
#  Paissad   ###
#################
anon_mkdir_write_enable=NO
ftp_username=ftp
log_ftp_protocol=YES
ls_recurse_enable=NO
no_anon_password=YES
#syslog_enable=YES
delete_failed_uploads=YES
deny_email_enable=YES
banned_email_file=/etc/vsftpd/vsftpd.banned_emails
anon_other_write_enable=NO
anon_upload_enable=NO
max_clients=200
max_per_ip=3
setproctitle_enable=YES
dirmessage_enable=YES
message_file=.message
anon_root=/media/ftp
userlist_enable=YES
userlist_file=/etc/vsftpd/vsftpd.user_list
userlist_deny=YES
# cat /etc/pki/tls/certs/vsftpd.pem
# openssl x509 -in /etc/pki/tls/certs/vsftpd.pem -noout -text
# chmod 600 /etc/pki/tls/certs/vsftpd.pem

##### SSL OPTIONS
ssl_enable=YES
debug_ssl=YES
allow_anon_ssl=NO
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES
#strict_ssl_read_eof=YES
force_local_data_ssl=NO
force_anon_data_ssl=NO
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES
rsa_cert_file=/etc/ssl/certs/vsftpd.pem


# Configuration du serveur pour un accès à partir d’Internet
pasv_enable=YES
pasv_promiscuous=NO
pasv_min_port=40000
pasv_max_port=40100
pasv_addr_resolve=YES
pasv_address=paissad.homelinux.com
port_promiscuous=NO

# Configuration pour utilisateurs virtuels
user_config_dir=/etc/vsftpd/vsftpd_user_conf
#guest_enable=YES
#guest_username=ftp