+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega International Area (/forum-22.html)
+--- Forum: German Corner (/forum-26.html)
+--- Thread: ProFTPD high load - fix (/thread-9064.html)
ProFTPD high load - fix - fulltilt - 01-03-2010 08:36 PM
das Problem mit der proftpd Load und dem langen Verbindungsaufbau besteht immer noch. Ich habe daher folgendes gemacht:
/etc/init.d/proftpd stop
mkdir /etc/proftpd/ispcp2
nano /etc/proftpd/ispcp2/proftpd-new.conf
einfügen und speichern:
Code:
<Directory ~/backups>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/backups/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/cgi-bin>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/cgi-bin/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/htdocs>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/htdocs/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/errors>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/errors/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/logs>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/logs/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/phptmp>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/phptmp/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/statistics>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/statistics/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>ändern (letzte Zeile):
Include /etc/proftpd/ispcp/*
nach:
Include /etc/proftpd/ispcp2/*
/etc/init.d/proftpd start
P.S.
den include auch in der /etc/ispcp/proftpd/proftpd.conf ändern auf ispcp2
Der Verbindungsaufbau ist nun schneller und die Load geht erheblich runter.
RE: ProFTPD high load - fix - Minganus - 02-09-2011 04:32 AM
Hello,
Thanks for solution!
But for protecting subdomains folders - backups, cgi-bin.... etc we must use additional rules
Code:
<Directory ~/*/backups>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/backups/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/*/cgi-bin>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/cgi-bin/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/*/htdocs>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/htdocs/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/*/errors>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/errors/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/*/logs>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/logs/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/*/phptmp>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/phptmp/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>
<Directory ~/*/statistics>
<Limit RMD RNTO DELE XRMD>
DenyAll
</Limit>
</Directory>
<Directory ~/*/statistics/*>
<Limit RMD RNTO DELE XRMD>
AllowAll
</Limit>
</Directory>In file all of this here
RE: ProFTPD high load - fix - fdriver - 07-28-2012 09:54 AM
(02-09-2011 04:32 AM)Minganus Wrote: Hello,
Thanks for solution!
But for protecting subdomains folders - backups, cgi-bin.... etc we must use additional rules
In file all of this here
Your idea is fine, but this not work for subdomains and aliases. Problem is with directory path ~/*/... char * middle of path is problem.
Have anybody any ideas for this ? Or some other fix for very long login time ProFTPd?
THX
P.S. Sorry for my english.