[Proftpd-user] File extension AllowFiler working for ftp but not sftp

"Block, Clemens via Proftp-user" <[email protected]> Thu, 11 Mar 2021 22:22:51 +0000
Newsgroups gmane.network.proftpd.user
Message-ID <AM9PR10MB40381448DE1951BD7EEA305EE0909@AM9PR10MB4038.EURPRD10.PROD.OUTLOOK.COM>
Hi all!

Have a strange problem.
We are allowing users to connect via  FTP and SFTP with different rights (managed by different groups)
All authentication / authorization is managed within a MariaDB.
For one group we only would like to allow uploading zip files
They should be able to delete uploaded files but not download them.

Below config is working fine for FTP but breaks for SFTP.
(logfile shows WRITE of '/abc.zip' blocked by <Limit> configuration)
For SFTP filehandle is created, but than client get permission denied and can't upload
Any idea what's wrong or can be improved?

  <IfGroup supplier>
     <Limit STOR >
     Order deny, allow
     AllowFilter (\.zip$|\.ZIP$)
    </Limit>
  </IfGRoup>
  <Limit APPE DELE CDUP CWD PWD STOU REST SIZE DELE>
    AllowGroup supplier
  </Limit>
  <Limit RETR RNFR RNTO MKD RMD >
    DenyGroup supplier
  </Limit>

Thanks for your help
    Clemens

PS: We are using Proftpd 1.3.5.e on a CentOS 7 box

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html