有谁用过frox?有它的原frox.conf文件吗?

paraller06

有谁用过frox?我用的是0.7.18版本.请问有谁有它的原frox.conf文件吗?

archangle

我在用，不过原始的配置文件你去官方应该能下载到吧。

黑夜编码人

源代码中 src/frox.conf

1. 
   
2. # Configuration file for frox transparent ftp-proxy.
   
3. 
   
4. # Send SIGHUP after editing and it will be reread. This will fail
   
5. # completely if we are chrooted and the config file isn't within the
   
6. # dir we have chrooted to, or if we have dropped priveleges and no
   
7. # longer have permission to read the config file! Some options cannot
   
8. # be reread - namely those which require special privelidges (ie.
   
9. # BindToDevice, Listen, Port, TransparentData) and the caching stuff.
   
10. 
    
11. 
    
12. ####################################################################
    
13. # Network Options                                                  #
    
14. ####################################################################
    
15. 
    
16. # Address to listen on - default is 0.0.0.0 If you are using an OS other
    
17. # than Linux and are doing transparent proxying then you will need to set
    
18. # this to the IP of a local interface. If using linux you could leave it
    
19. # commented out to listen on all local IPs.
    
20. #
    
21. # Listen firewall.localnet
    
22. Listen 192.168.2.1
    
23. 
    
24. # Port to listen on. Must be supplied.
    
25. #
    
26. Port 2121
    
27. 
    
28. # If specified then bind to this device
    
29. #
    
30. BindToDevice eth0
    
31. 
    
32. # Whether to run from inetd. You should still define Port above, but
    
33. # it isn't used for much.
    
34. #
    
35. # FromInetd yes
    
36. 
    
37. # Stop frox from putting itself into the background. Use this if you want
    
38. # to run frox from supervise from djb's daemontools
    
39. #
    
40. # NoDetach
    
41. 
    
42. # A hack that should allow you to get away without putting resolver libraries
    
43. # into the chroot jail. The default is fine unless for some reason you have
    
44. # this hostname in /etc/hosts. If this sort of thing offends you, you may
    
45. # comment this out and copy resolver libraries into the chroot jail instead.
    
46. # See FAQ section 3.2 for details.
    
47. #
    
48. ResolvLoadHack wontresolve.doesntexist.abc
    
49. 
    
50. # Another ftp proxy to forward on to. Frox will contact this ftp
    
51. # proxy, and send it a login name of the form "user@host:port" where
    
52. # host and port are the server frox should contact. If you set
    
53. # FTPProxyNoPort then frox will send logins of the form user@host
    
54. #
    
55. # FTPProxy 192.168.2.9:2222
    
56. # FTPProxyNoPort yes
    
57. 
    
58. # Pick the IP frox should use for outgoing connections. You probably don't
    
59. # need this, and it is not well tested.
    
60. #
    
61. # TcpOutgoingAddr
    
62. 
    
63. # Pick the IP that frox should send in PASV replies to the client. Defaults
    
64. # to the address frox received the control connection on which you shouldn't
    
65. # need to change unless you are doing NAT between frox and your clients, or
    
66. # are trying to tunnel connections using frox. See FAQ.
    
67. #
    
68. # PASVAddress
    
69. 
    
70. ####################################################################
    
71. # General Options                                                  #
    
72. ####################################################################
    
73. # User and group to drop priveliges to. This must be specified - if
    
74. # you really want to run as root (not a good idea) you must say so
    
75. # specifically, and have compiled with --enable-run-as-root.
    
76. #
    
77. # User nobody
    
78. # Group nogroup
    
79. 
    
80. # This is frox's working directory - it must be specified. Temporary
    
81. # files and sockets will be created here. If you are using local
    
82. # caching then the cache will be stored in this directory too. It
    
83. # should be owned by frox with permissions 700. By default frox will
    
84. # also chroot to this dir on startup. To avoid this you must specifically
    
85. # set DontChroot to Yes.
    
86. #
    
87. # WorkingDir /usr/local/lib/frox
    
88. # DontChroot Yes
    
89. 
    
90. # Logging level. 0=No logging. 5=Critical errors only. 10= All errors.
    
91. # 15=Errors, other important stuf. 20= Errors, connections, cache
    
92. # hits/misses 25=Debug info including text of control session. By
    
93. # default frox will log through syslog as facility daemon. If you want
    
94. # frox to log to a file instead specify this in LogFile below. You may
    
95. # set LogFile to "stderr" if you wish it to log there. XferLogging
    
96. # defaults to on, and results in a one line log entry for each file
    
97. # transferred irrespective of the log level. You can turn this off
    
98. # below.
    
99. #
    
100. # LogLevel 15
     
101. # LogFile /usr/local/lib/frox/frox-log
     
102. # XferLogging no
     
103. 
     
104. # File to store PID in. Default is not to. If this file is not within
     
105. # the Chroot directory then it cannot be deleted on exit, but will
     
106. # otherwise work fine.
     
107. #
     
108. PidFile /var/run/frox.pid
     
109. 
     
110. 
     
111. ####################################################################
     
112. # Ftp Protocol Options                                             #
     
113. ####################################################################
     
114. 
     
115. # Active --> Passive conversion. If set then all outgoing connections
     
116. # from the proxy will be passive FTP, regardless of the type of the
     
117. # connection coming in. This makes firewalling a lot easier. Defaults
     
118. # to no.
     
119. #
     
120. # APConv yes
     
121. 
     
122. # Passive --> Active conversion. If set then all outgoing connections
     
123. # from the proxy will be active FTP, regardless of the type of the
     
124. # connection coming in. Defaults to no.
     
125. # DO NOT USE WITH APConv!
     
126. #
     
127. # PAConv yes
     
128. 
     
129. # Block PORT commands asking data to be sent to ports<1024 and
     
130. # prevent incoming control stream connections from port 20 to
     
131. # help depend against ftp bounce attacks. Defaults to on.
     
132. #
     
133. BounceDefend yes
     
134. 
     
135. # If true then only accept data connections from the hosts the control
     
136. # connections are to. Breaks the rfc, and defaults to off.
     
137. #
     
138. # SameAddress yes
     
139. 
     
140. # Normally frox strips out nonprintable characters from the control
     
141. # stream. This makes buffer overflow attacks on clients/servers much more
     
142. # difficult. If you download files that contain non english characters
     
143. # this may cause you problems (especially for big charsets like Chines).
     
144. # In that case turn on this option.
     
145. #
     
146. # AllowNonASCII yes
     
147. 
     
148. # Try to transparently proxy the data connections as well. Not
     
149. # necessary for most clients, and does increase security risks. N.V.
     
150. # You probably do _NOT_ need this option. It increases the complexity
     
151. # of what frox has to do, increases the difficulty of setting frox up
     
152. # correctly, and increases potential security risks. This has nothing
     
153. # to do with whether your clients will be transparently proxied. If
     
154. # you still want to use this option then read README.transdata for
     
155. # details.
     
156. #
     
157. # TransparentData yes
     
158. 
     
159. # Specify ranges for local ports to use for outgoing connections and
     
160. # for sending out in PORT commands. By default these are all between
     
161. # 40000 and 50000, but you might want to split them up if you have
     
162. # complicated firewalling rules.
     
163. #
     
164. # ControlPorts 40000-40999
     
165. # PassivePorts 41000-41999
     
166. # ActivePorts  42000-42999
     
167. 
     
168. # SSL/AUTH support. Frox must have been linked to the openssl libraries.
     
169. # This is currently experimental, and only tested against vsftpd
     
170. #
     
171. # UseSSL yes
     
172. # DataSSL no
     
173. 
     
174. ####################################################################
     
175. # Caching Options                                                  #
     
176. ####################################################################
     
177. 
     
178. # Caching options. There should be at most one CacheModule line, and
     
179. # Cache lines to give the options for that caching module. CacheModule
     
180. # is HTTP (rewrites ftp requests as HTTP and sends them to a HTTP
     
181. # proxy like squid), or local (cache files locally). The relevant
     
182. # module needs to have been compiled in at compile time. See FAQ for
     
183. # details. If there are no CacheModule lines then no caching will be
     
184. # done. "CacheModule None" explicitly requests no caching, and is
     
185. # useful to turn off caching within a subsection (below).
     
186. #
     
187. # CacheModule local
     
188. # CacheSize 400
     
189. #
     
190. # CacheModule http
     
191. # HTTPProxy 127.0.0.1:3128
     
192. # MinCacheSize 65536
     
193. # ForceHTTP no  # Set to yes to force http file retreiving even if
     
194. #               # file is not cacheable
     
195. #
     
196. # StrictCaching no  # Read FAQ for details.
     
197. # CacheOnFQDN yes   # Read FAQ for details.
     
198. #
     
199. # CacheAll no   # Set to yes to cache non anonymous ftp downloads
     
200. 
     
201. # Virus scanning -- see FAQ
     
202. #
     
203. # VirusScanner '"/usr/bin/viruscan" "--option" "%s"'
     
204. # VSOK 0
     
205. # VSProgressMsgs 30
     
206. 
     
207. 
     
208. ####################################################################
     
209. # Access control                                                   #
     
210. ####################################################################
     
211. 
     
212. # Allow non-transparent proxying support. The user can connect
     
213. # directly to frox, and give his username as user@host:port or
     
214. # user@host. Defaults to no. NTPAddress gives the address to which
     
215. # incoming connections must be addressed if the client is to be offered
     
216. # non-transparent proxying. For most people using this it will be the same
     
217. # as the Listen address above. If not given then all connections will be
     
218. # offered non transparent proxying. If you are not using transparent
     
219. # proxying at all then you should leave NTPAddress commented out.
     
220. #
     
221. # DoNTP yes
     
222. # NTPAddress 192.168.2.1:2121
     
223. 
     
224. # Number of seconds of no activity before closing session
     
225. # Defaults to 300
     
226. #
     
227. # Timeout 300
     
228. 
     
229. #Maximum number of processes to fork.
     
230. #
     
231. # MaxForks 0 # For debugging -- only one connection may be served.
     
232. MaxForks 10
     
233. 
     
234. # Maximum number of connections from a single host (IP address).
     
235. MaxForksPerHost 4
     
236. 
     
237. # Maximum number of bytes/second to be transferred over the data
     
238. # connection for each client. MaxTransferRate limits downloads and
     
239. # MaxUploadRate uploads. CacheDlRate is the rate for downloads of files
     
240. # that are cached locally - if not set these files will be downloaded at
     
241. # full speed.
     
242. #
     
243. # MaxTransferRate 4096
     
244. # CacheDlRate 8192
     
245. # MaxUploadRate 4096
     
246. 
     
247. # Access control lists:
     
248. # The format is: "ACL Allow|Deny SRC - DST [PORTS]"
     
249. 
     
250. # SRC and DST may be in the form x.x.x.x, x.x.x.x/yy, x.x.x.x/y.y.y.y,
     
251. # a dns name, or * to match everything.
     
252. #
     
253. # PORTS is a list of ports. If specified then the rule will only match
     
254. # if the destination port of the connection is in this list. This is
     
255. # likely only relevant if you are allowing non-transparent proxying of
     
256. # ftp connections (ie. DoNTP is enabled above). Specifying * is equivalent
     
257. # to not specifying anything - all ports will be matched
     
258. #
     
259. # Any connection that matches no rules will be denied. Since there are
     
260. # no rules by default you'll need to add something to let any
     
261. # connections happen at all (look at the last example if you are
     
262. # feeling lazy/not bothered by security).
     
263. #
     
264. # # Examples:
     
265. # # Allow local network to ftp to port 21 only, and block host ftp.evil
     
266. # ACL Deny * - ftp.evil            
     
267. # ACL Allow 192.168.0.0/255.255.0.0 - * 21
     
268. #
     
269. # # Allow local network to ftp anywhere except certain dodgy ports. Network
     
270. # # admin's machine can ftp anywhere.
     
271. # ACL Allow admin.localnet - *
     
272. # ACL Deny * - * 1-20,22-1024,6000-6007,7100
     
273. # ACL Allow 192.168.0.0/16 - * *
     
274. #
     
275. # # You don't really believe in this security stuff, and just want
     
276. # # everything to work.
     
277. ACL Allow * - *
     
278. 
     
279. # Command control program: A bit like the idea of a squid redirector.
     
280. # By default the old interface is used so as not to break existing
     
281. # installations. The new interface is much more powerful, and is
     
282. # reccommended for new scripts -- set UseOldCCP to false to use it.
     
283. # See the FAQ for details.
     
284. #
     
285. # CCProgram /usr/local/lib/frox/bin/ccp
     
286. # UseOldCCP no
     
287. 
     
288. 
     
289. ####################################################################
     
290. # Subsections                                                      #
     
291. ####################################################################
     
292. # Matching rules the same as ACLS. Only some options can be specified
     
293. # in a subsection (currently the yes/no options, timeout, and caching
     
294. # options).
     
295. #
     
296. # SubSection * - ftp.dodgy.server
     
297. #  StrictCaching yes
     
298. # EndSection
     
299. #
     
300. # SubSection * - 10.0.0.0/24 # A low latency high bandwidth connection
     
301. #  MinCacheSize 4096
     
302. # EndSection
     
303. #
     
304. # Subsection * - ftp.localnetwork
     
305. # # To disable caching if it has been turned on in a parent section
     
306. #  CacheModule None
     
307. # EndSection
     

复制代码

[ 本帖最后由 黑夜编码人 于 2006-10-12 10:44 编辑 ]