View Attach (7) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 misc1.png 19.5 kB 2 05-Dec-2023 05:32 Ben Spink
png
 misc2.png 28.8 kB 3 05-Dec-2023 05:32 Ben Spink
png
 misc3.png 18.4 kB 3 05-Dec-2023 05:32 Ben Spink
png
 misc4.png 23.5 kB 3 05-Dec-2023 05:32 Ben Spink
jpg
 misc5.jpg 243.7 kB 1 05-Dec-2023 05:32 Ada Csaba
jpg
 miscv10.5.2.3.jpg 336.1 kB 1 05-Dec-2023 05:32 Ada Csaba
jpg
 miscv10.jpg 193.2 kB 1 05-Dec-2023 05:32 Ada Csaba

This page (revision-65) was last changed on 21-Mar-2024 08:25 by krivacsz

This page was created on 05-Dec-2023 05:32 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 1 changed one line
Always do RETR in BINARY and Always do STOR in BINARY prevents CrushFTP from altering ascii text files line endings even if the FTP client request such. That is a FTP related feature only.
[{Image src='miscv10.5.2.3.jpg' width='..' height='..' align='left' style='..' class='..' }]
At line 3 changed 113 lines
The check for new versions allows CrushFTP to notify you when a new version has been found. A new version can either be downloaded from the check for update from the file menu or by going directly to the website.
Allow extended PASV/PORT as EPSV/EPRT is a compatibility thing on FTP related port. Some clients just can't handle if its enabled because of a network configuration.
Allow directory caching determines if CrushFTP will keep temporary caches of dir listings in memory to reduce the CPU load on CrushFTP with very active servers, if enabled can speed up the directory listings.
Use 'ls -la' for dir listings will use the native OS command to get a dir listing for FTP so that Crush can report the true owner, group, and privs information.
[attachments|misc1.png]
Auto IP discovery is how often CrushFTP should scan to be sure your current external IP is still the same.
If you want to specify your external IP address, you do so in the box in the [IP Servers] window.
Slow down hack attempts will incrementally slow down responses to clients that appear to be a robot scanning for writable directories on your server. This makes their scan take a lot longer, and helps make those robots less useful. It doesn't use any extra CPU load.
Disable referer cookie will disable crush forwarding a user who was deep linking into a specific directory after they have authenticated.
Allow local passive IP is an FTP related config only and allows the local server host IP to be used by the passive IP detection logic.
Allow MLST is an FTP related config only that enables the use of setting modified date by MLST raw command.
Allow 0 byte SSH file is an SFTP related config only that allows the clients to connect. Needed by some SFTP clients and when using SSHFS mount.
Case sensitive list search enables the search in client UI to be case sensitive.
Create home folder enables the creation of the users's home folder on disk if it doesn't exits.
Fix Slashes will sanitize the Windows path syntax based URLs and convert them to Unix format.
Instant chmod is used in conjunction with User Manager POSIX settings to set ownership of files.
List zip app will show .app folders from OSX as a .zip file allowing easier downloading of them.
MDTM GMT will set files modified date based on GMT, in opposite to local server time.
POSIX config is UNIX-like only, changes ownership of server config files (by default the process logon account takes ownership)
RFC Proxy tries to pass through proxied FTP responses directly instead of interpretation.
Recurse SFTP Delete config enables checking folders if they are empty and starts deleting the files and then the empty folder, by default no recursive delete is possible.
Show Date-Time will enable the display of the date time display in client UI.
Site acknowledgement issues SITE ACK in certain proxy scenarios.
Sort Listings will enable the sorting of the folders in alphabetical order, but can enabling it might cause a slower UI.
Track Last Logins enables the tracking of user login times and saves that to the user.XML, can also cause UI slowness due to the multiple read and write back and forth to the same file.
DMZ only listens for connections from master ServerBeat server config in a clustered multi node configuration, forces the DMZ node to listen to connections from Master node only. Needs to be set only on DMZ instance.
Pre-check PGP decrypt on the fly downloads checks if a file stream appears to be PGP encrypted to decide whether to try on the fly decryption or not.
The default privs option lets you specify the default privs to be applied to new folders as you add them to users in the User Manager. It can save you a couple clicks to enter the data here. If your unsure of what to put, open a users VFS.XML file to see an example of the permissions. (read)(write)(view)(delete)(resume)(rename)(makedir)(deletedir)
The date and time format is a Java format for how to log time stamps with each line. If you want to alter it, check out the formatting character by googling : java simpledateformat.
The default owner and group of settings files allows CrushFTP to change the owner and group of all settings files as it is writing them. So if you don't want the settings files all owned by root for some reason, you change these settings here. Works on Unix-like OS's.
HTTP Redirect Base if checked allows the redirects for SAML.
CrushFTP is keeping backups every time you make a change and save a user in the User Manager. If for some reason you don't want so many kept, you can control the setting here. The Zip64 config allows the usage of the Zip64 for large files, and the Zip64 Always will force the use of Zip64 in every scenario.
[attachments|misc2.png]
ZIP Compression level is what CrushFTP will use when zipping files/folders on the fly. Did you know you can ask for any folder name plus add on ".zip" and crush will instead zip it and send it to you?
The reverse of this zip on the fly is .zipstream. Any file that is named with the extension .zipstream will be unzipped as its coming in, never writing the zip file to disk. This allows for seamless decompression on the fly with all protocols. The WebInterface provides simple buttons for handling all this zip functionality.
Another unique feature is ':filetree'. Downloading this special file in any directory will instead give you a text file of all files and subdirectories from that current location.
Disable MDTM modifications allows you to block FTP clients that upload a file, then set the modified date on the file.
Delete partial uploads will remove any files that don't make it to what appears not to be a complete successful upload.
You can disable clients from begin able to list subdirectories with the LIST command in FTP.
[attachments|misc3.png]
Delay between dir listings allows you to make a client pause before they can get another dir listing. Some clients may recursively list your entire FTP server repeatedly looking for changes making you use a lot of server CPU to do fulfill their requests. Here you can slow them down.
Allow re-use in email events allows you to have multiple email events that all include the same notifications on files. Rarely would you want this.
Maximum jobs to scan for job monitor configures the maximum number of jobs to look through and return to the WebUI job monitor tab.
Remember invalid usernames will make crush block a robot testing for passwords. Some robots will scan your server very heavily using a lot of CPU while crush tries to verify on your LDAP server, or whatever if the user is valid. This option will block the username attempted for so many seconds after one failed login attempt before it bothers to even try again. If the username is valid in the CrushFTP User Manager it will ignore this setting and allow them to keep trying new passwords.
Run events asynchronously allows you to have events "complete" even when say an email server is slow to process the outgoing message or a LaunchProcess event is slow to finish. Normally events 'consume' the file item they used, but you can allow re-use if you want it used by the same event at a later time in the user's session.
Force Lowercase Usernames config will store the usernames always in lower case.
The WebDAV timezone offset lets you manually adjust times reported to WebDAV to fix some clients being off by so many hours.
File transfer mod config is FTP related only that forces the ASCII or BINARY on all transfers.
[attachments|misc4.png]
Max Threads config will limit the server global thread pool size.
Unsafe filename characters will disallow certain characters to be used in file names on upload.
Replace unsafe filename characters with config will replace certain characters with underscore on upload.
Restart Command allows overriding the default service restart OS native command.
Trusted IP Parts config is a CrushTunnel or other proxied scenarios where the user's source IP may not match exactly every time...such as different proxy servers getting used and the source Ip changes.
The server start message is how CrushFTP identifies itself to clients when they connect.
Max items before CrushFTP tries to trigger an alert and logs errors about giant directories which may cause memory issues. Operating on huge directory structures is memory intensive, can set a threshold to warn the user
Replicated toggle S3 replication in a clustered server configuration. Same as on the replication config page.
Disable uploads in progress and resume toggles resume capability when operating on an S3 bucket
!!Generic:
;Check for New Versions: toggle on/off and set the frequency of checking for new versions on our update repository; requires outbound Internet access to crushftp.com over HTTPS
;Auto IP discovery refresh interval in minutes: toggle on/off and set the frequency of visiting http://checkip.dyndns.org/ to check the public IP of the server.
;List zip app: N/A
;DMZ only listens for connections from master ServerBeat server: in the specific cluster scenario when multiple Main nodes set up with ServerBeat map to a single DMZ proxy, toggles the DMZ node to only listen to the ServerBeat Master node. Takes effect only on a DMZ instance. This particular use scenario is fit for specific purpose, generally not recommanded.
;Restart Command : N/A
;Site acknowledgement: N/A
;Geo ip access key: the geoIP map on the Dashboard requires an active subscription to https://ipstack.com/. Input here the API key
\\
!!Date time related:
;MDTM GMT: use GMT instead of server time to set the uplaoded files' time stamp.
;Show Date-Time: toggle displaying server time on the admin GUI
;Log Date / Time Format: date time format string for log lines' time stamp
;WebDAV Timezone Offset: offset the date modified metaparameter of files uploaded over WebDAV
\\
!!Security related:
;Slow Down Hack Attempt Scans: will incrementally slow down responses to clients that appear to be a robot scanning for writable directories on your server.
;Default 'owner' of settings files: applies only under UNIX-like operating systems. By default the daemon will run as root, can change the owner of our config files (chown)
;Default 'group' of settings files: same as above, sets the group (chgrp)
;Pre-check PGP decrypt on the fly downloads: N/A
;Remember invalid usernames for x seconds: sets the time interval to cache usernames attempted with bad password. When using the LDAP Group or other identity integration plugins, this parameter needs always to be set 0
;Trusted IP Parts: in case of CrushTunnel or other proxied scenarios where the user's source IP may not match exactly every time, such as different proxy servers getting used and the source IP changes.
\\
!!FTP specific,global:
;Always do RETR in BINARY: Force download to binary mode always
;Always do STOR in BINARY: Force upload to binary always
;Allow extended passive and port commands (EPSV/EPRT): enables the IPv6 extensions for FTP as per rfc2428
;Allow local passive IP: toggles inclusion of the local server IPs in the passive IP detection logic.
;Allow MLST: enable rfc3659 extensions for FTP
;Allow listing subdirectories via LIST: N/A
;File transfer mode: default value BINARY, keep it that way, except when simulating some obsolete mainframe class FTP server
;RFC Proxy: tries to pass through proxied FTP responses directly instead of interpretation.
;Server Start Message: sets a global welcome message
\\
!!HTTP/S specific,global:
;Disable Referer Cookie: obsolete, to be removed. Superseeded by Referrer-Policy security header, can apply that on our [CSP|CSP] page
;HTTP Redirect Base: default value DISABLED, clear when using one of our SSO integration plugins.
\\
!!SFTP specific, global:
;Allow 0 byte SSH file: workaround to allow touch
;Recurse SFTP Delete: workaround to allow recursive delete of directories
\\
!!File folder access/listings and processing related:
;Allow Directory Caching: memcache dir listings for faster response, reduces CPU usage with the expense of higher memory usage
;Use 'Is-la' for directory listings (OSX, Unix, Linux): use OS native commands to generate dir listings to honor file system level permissions. Slow and CPU intensive. Required when using POSIX options.
;Count folder items: toggle counting subfolders when display the number of items in a directory, over the client Webinterface.
;Case sensitive list search: toggle between case sensitive directory search over the client Webinterface
;Create home folder: workaround for orphaned VFS, will create recursively the physical directories on first upload
;Fix Slashes: N/A
;Instant chmod: N/A
;Sort Listings: toggles displaying a dir listing in ascending alphabetical order. By default, we'll display the listing in natural order, as the storage backend presents it to us.
;POSIX: for user uploads and files processed by Jobs, toggles the default UNIX file system level owner and group same as set in "Default 'owner' of settings files" and "Default 'group' of settings files: ". Can be overridden by per user POSIX.
;Zip Compression Level: sets the compression level for zip downloads
;Zip64: toggles support for Zip64 compression for large files. Default zip is limited to 4GB per block.
;Zip64 Always: forces Zip64 for all zip downloads.
;Disable MDTM modifications: disallow the uploading client to set custom date modified. Applies to all transport protocols.
;Allow '.zipstream' Expansion: Zip files with .zipstream extension will automatically be unarchived on upload.
;Delete partial uploads: complements the per user temporary extension feature. If both enabled, the server will cleanup partial files after an interrupted upload.
;Allow Magic '.filetree' Download: N/A
;Unsafe filename characters: URL-unsafe special characters, like /,\,*,%,: will cause the server to be unable to list uplaoded files, or not to save to disk at all. Can define a custom list of characters to be automatically replaced with a safe special character, like - or _
;Replace unsafe filename characters with: define the replacement special character.
\\
!!User accounts related:
;Default privs for new VFS items in User Manager: can change the default read only VFS permissions . Accepted values:
(read) - Download
(write) - Upload
(view) - List directory content
(delete) - Delete file
(deletedir) - Delete folder
(makedir) - Create folder
(rename) - Rename file
(resume) - Resume file transfer
(share) - Allow Share/Publish
(slideshow) - Allow playback of image files as slide show in the Webinterface
(invisible) - Hide folder with all of it's contents
(replicate) - In case of a cluster with file replication, toggle replication
(locked) - Prevent changes on that directory level
;Track Last Logins: keep the most recent login date time stored by the user accounts database. Can cause user corruption on slow disks.
;Keep x backups of users in User Manager: the amount of backup copies to store of each user account.
;Force Lowercase Usernames: store user names in all lowercase by the user accounts database.
\\
!!Performance related:
;Allow re-use in Email Events: allows you to have multiple email Events that all include the same notifications on files. Obsolete feature that complements the old email template based Events. We recommand CrushTask Email events, with chained Email tasks instead.
;Run Events Asynchronously: Async events run on a separate thread from the event hook. This option forces all events set to Auto to run async. Can be overridden on a per user basis.
;Maximum jobs to scan for job monitor: limits the number of jobs history displayed on teh Jobs page "Active Jobs" panel.
;Max Threads: limits the global server thread pool size.
;Max items before CrushFTP tries to trigger an alert and logs errors about giant directories which may cause memory issues: operating on huge directory structures is memory intensive, can set a threshold to warn the user
\\
!!Amazon S3 storage protocol specific:
Defaults are fine, do not change these, unless specifically recommanded by us.
;Max Download Buffer : N/A
;Download Threads : N/A
;Upload Buffer : N/A
;Upload Threads : N/A
;Download Buffer : N/A
;Replicated: N/A
;Disable uploads in progress and resume: N/A
\\
!! Extra parameters:\\
\\
Only available in the prefs.XML (Placed in CrushFTP install folder) file.\\
XML tag values:
{{{
keywords_add_upload_by_on_upload -> If true, it appends keywords with the username who uploaded the file. (Example: Uploaded by: crushadmin)
alt_logo_ignore_protocols - Related with "display_alt_logo" If "display_alt_logo" is true, it ignores the provided remote protocols. (Default value:s3,azure,gdrive,gstorage,onedrive,sharepoint,box,sharepoint2,b2,dropbox)
}}}
\\
Version Date Modified Size Author Changes ... Change note
65 21-Mar-2024 08:25 8.386 kB krivacsz to previous
64 21-Mar-2024 08:21 8.159 kB krivacsz to previous | to last
63 21-Mar-2024 08:21 8.161 kB krivacsz to previous | to last
62 21-Mar-2024 08:20 8.127 kB krivacsz to previous | to last
61 21-Mar-2024 08:17 8.042 kB krivacsz to previous | to last
« This page (revision-65) was last changed on 21-Mar-2024 08:25 by krivacsz
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by
LeftMenu

JSPWiki