* Sat Feb 15 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-7.sme

- disable anonymous by default [SME: 931]
- add passive port [SME: 12454]
- TLSv1.3 filtered out as not supported by 1.3.6 branch [SME: 12925]
- fix wrong group defined for ibays [SME: 7914]
- drop runit for full systemd service unit [SME: 12874]

README.md

@@ -3,7 +3,7 @@
 SMEServer Koozali developed git repo for smeserver-proftpd smeserver
 
 ## Wiki
-<br />https://wiki.koozali.org/
+<br />https://wiki.koozali.org/ftp
 
 ## Bugzilla
 Show list of outstanding bugs:
@@ -18,8 +18,23 @@ And a list of outstanding Legacy bugs: (e-smith-proftpd) [here](https://bugs.koo
 
 ## Description
 
-<br />*This description has been generated by an LLM AI system and cannot be relied on to be fully correct.*
-*Once it has been checked, then this comment will be deleted*
-<br />
-
 smeserver-Proftpd is an open source software package that allows users to easily set up an FTP server on their Linux or Unix-based system. It is a part of the smeserver software family, which consists of a number of professional tools for system administrators. The package provides a secure and reliable way to transfer files over the internet. It provides a wide range of features, such as virtual hosting, bandwidth throttling, file transfer logging, and support for stand-alone or inetd/xinetd operations. It is a powerful and versatile tool, and is ideal for those who want to manage and share files from their own web server.
+
+## Configuration 
+db show ftp
+- CipherSuite= $modSSL{CipherSuite} || $smeCiphers;
+- DisableAnonymous=yes (was no as default before SME11) 
+- LoginAccess=private
+- TCPPorts=49200:49999
+- TCPPort=21
+- TLSEnable=on
+- TLSRequired=on
+- TLSVerifyClient=off
+- access=private
+- status=disabled
+
+db accounts
+- ibay{'DisableAnonymous'}=no
+- ibay{'UserAccess'}
+- ibay{'PublicAccess'}= 'none';
+- user{ChrootDir'}|| $ftp{'ChrootDir'} || disabled;