# ftpaccess file for ftpd@linat1.physics.lsa.umich.edu
# by Eric Myers <myers@umich.edu>  on 28 December 2000
#
# @(#) Last Changed -EAM 30Nov2001
######################################################################
# Access classes are defined near the bottom but used by name before that

# If /etc/shutmsg exists, don't allow logins.  See ftpshut man page.
shutdown /etc/shutmsg

# Log transfers to /var/log/xferlog
log transfers anonymous,real inbound,outbound


#########
# Access controls:

loginfails 3
passwd-check rfc822 enforce

# Don't allow system accounts to log in over ftp
deny-uid %-99 %65534-
deny-gid %-99 %65534-
allow-uid ftp
allow-gid ftp


noretrieve relative /etc/passwd /etc
noretrieve  core  .notar

compress        yes             all
tar             yes             all
chmod		no		guest,anonymous
delete		no		guest,anonymous
overwrite	no		guest,anonymous
rename		no		guest,anonymous


##########
# Messages:

greeting brief
banner /usr/local/lib/ftpd/msgs/banner
email root@linat1.physics.lsa.umich.edu

message .message    cwd=* 
message /usr/local/lib/ftpd/msgs/welcome       login    anon com cern

readme  READ*    login
readme  READ*    cwd=*


##########
# Classes:

class   all     real,guest,anonymous  *
class   local   real *.umich.edu *.mich.net
class   remote  real *
class   cern    anonymous 137.138.59. *.cern.ch 
class   umich   anonymous *.umich.edu *.mich.net # Local anonymous ftp
class   com     anonymous *.com *.net		 # Anonymous ftp from *.com *.net
class   anon    anonymous *			 # anybody else
class   unnamed !nameserved

# Limits per class:

limit   anon    5   MoTuWeThFr0900-1800 /usr/local/lib/ftpd/msgs/anontoomany
limit   anon    9   SaSu|Any1800-0900   /usr/local/lib/ftpd/msgs/anontoomany
limit   local   9   Any                 /usr/local/lib/ftpd/msgs/toomany
limit   remote  1   Any                 /usr/local/lib/ftpd/msgs/toomany
limit   remote  1   SaSu|Any1800-0900   /usr/local/lib/ftpd/msgs/toomany
limit   com     1   MoTuWeThFr0900-1800 /usr/local/lib/ftpd/msgs/comtoomany
limit   com     1   SaSu|Any1800-0900   /usr/local/lib/ftpd/msgs/comtoomany

limit   dead    0   Any                 /usr/local/lib/ftpd/msgs/dead
limit   unnamed 5   Any                 /usr/local/lib/ftpd/msgs/no_nameserver

# The following line, if enabled, will deny access to anybody who
# cannot be resolved by our nameserver. 
#
# Disabled because wu-fptd-2.5.0 apparantly had DNS problems -EAM 13Aug1999
# Try it now -EAM 30Nov2001
deny !nameserved        /home2/ftp/etc/msgs/no_nameserver

# Go away.

deny  194.12.249.64   /home2/ftp/etc/msgs/dead

## EOF ftpaccess ###