Restrict FTP user access on shared IP server

I setup Debian Sarge 3.1 and ProFTPD with ISPConfig. It all works OK. Only problem I have is that all my website ftp users have access to root when login with client (WS-FTP Pro). When they log with Web-FTP from ISPConfig everything works fine, they only can see their home dir.
Another thing is than when creating sites I have only 'Admin' as group...

Any help?

 

I even tried this tutorial Virtual Hosting With Proftpd And MySQL (Incl. Quota), but still no results. user goes to his home dir, that is OK, jist that he can up-dir to the root...

 

This setup is incompatible with ISPConfig. ISPConfig uses system users, not virtual users...

Do you have

Code:

DefaultRoot  ~

in /etc/proftpd.conf?

 

Yes, I do.

Files from /etc are like this:

proftpd.conf

DefaultRoot ~
IdentLookups off
ServerIdent on "FTP Server ready."
Include /etc/proftpd_ispconfig.conf


proftpd_ispconfig.conf

###################################
#
# ISPConfig proftpd Configuration File
# Version 1.0
#
###################################
DefaultAddress 127.0.0.1
<VirtualHost XXX.XXX.XXX.XXX>
DefaultRoot ~
AllowOverwrite on
Umask 002
</VirtualHost>


XXX.XXX.XXX.XXX - Server external IP

 

Please comment out DefaultAddress 127.0.0.1 and restart Proftpd. Does it work then?

 

No, still the same. Login user to his home dir, but he can still go up all the way to the root

 

server:# netstat -tap | grep ftp
tcp6 0 0 *:ftp *:* LISTEN 6527/proftpd: (acce

server:/etc# locate proftpd.conf
/etc/proftpd.conf
/etc/proftpd.conf.orig
/etc/proftpd/proftpd.conf
/usr/share/proftpd/templates/proftpd.conf
/var/lib/dpkg/info/proftpd.conffiles
/var/lib/dpkg/info/proftpd.config

 

That did the trick! All the time i was changing in /etc/proftpd.conf, which is as i recall just a linkage...

Thanks for all the patience and your help.