/etc/vsftpd.conf

# Run standalone?  vsftpd can run either from an inetd or as a standalone
# daemon started from an initscript.
# Diese Option muss auf NO gestellt sein, damit vsftpd nicht schon beim Systemstart
# gestartet wird, sondern durch den xinetd gestartet wird
#
listen=NO
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
# Wir wollen keinen anonymen Login auf unserem Server:
#
anonymous_enable=NO
#
# Uncomment this to allow local users to log in.
# Wir legen unsere User die FTP nutzen dürfen selbst an:
#
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
#
local_umask=022
#
# Wir verbieten FTP Clients die Änderungen an Dateiberechtigungen und erzwingen
# dadurch die og umask:
#
chmod_enable=NO
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# Activate logging of uploads/downloads.
xferlog_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
#
xferlog_file=/var/log/vsftpd.log
#
# You may fully customise the login banner string:
ftpd_banner=Welcome to prontosystems.org  FTP service.
#
# You may restrict local users to their home directories.  See the FAQ for
# the possible risks in this before using chroot_local_user or
# chroot_list_enable below.
chroot_local_user=YES
#
# This option should be the name of a directory which is empty.  Also, the
# directory should not be writable by the ftp user. This directory is used
# as a secure chroot() jail at times vsftpd does not require filesystem
# access.
#
secure_chroot_dir=/var/run/vsftpd
#
# This string is the name of the PAM service vsftpd will use.
#
pam_service_name=vsftpd
#
# This option specifies the location of the RSA certificate to use for SSL
# encrypted connections.
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
#
# Maximale Anzahl von Anmeldeversuchen pro Session. Diese Angabe ist wichtig, wenn
# der FTP Login von einem Script überwacht wird, welches nach einer bestimmten Anzahl
# fehlgeschlagener Anmeldeversuche, den Zugang blockiert. Das funktioniert nur dann,
# wenn der Zugang unterbrochen wird. Ohne diese Option würde die Session so lange
# offen bleiben, wie der Brute Force Versuch andauert.
#
max_login_fails=3
#
# Delay in Sekunden zwischen erneutem Anmeldeversuch:
#
delay_failed_login=5
#
# The userlist_enable" option instructs vsftpd to either consult or not consult either of 2 files: 
#vsftpd.ftpusers and vsftpd.user_list. If this option is set to "YES", the 2 files serve as lists 
#of users that are allowed to FTP to the server. However, when coupled with the "userlist_deny=YES"" 
#option, the 2 files serve as list of users who are NOT allowed to FTP to the server. This option is 
#very useful in completely denying FTP access to critical system users such as "root" or "apache" or 
#"www". A very nice layer of security for your FTP server.
#
userlist_enable=YES
userlist_deny=YES
check_shell=NO