proftpd_1.2.10 настроен так:
ServerType                      standalone                                                                  
DeferWelcome                    off                                                                          
IdentLookups                    off                                                                          
MultilineRFC2228                on                                                                          
DefaultServer                   on                                                                          
ShowSymlinks                    on                                                                          
AllowOverwrite                  on                                                                          
                                                                                                            
TimeoutNoTransfer               600                                                                          
TimeoutStalled                  600                                                                          
TimeoutIdle                     1200                                                                        
                                                                                                            
DisplayLogin                    welcome.msg                                                                  
DisplayFirstChdir               .message                                                                    
ListOptions                     "-l"

UseReverseDNS off                                                                                            
AllowFilter ^[-A-Za-z0-9_\.(),/]*$                                                                          
AllowForeignAddress off                                                                                      
AllowOverride off                                                                                            
AllowOverwrite on                                                                                            
DefaultRoot ~                                                                                                
User nobody                                                                                                  
Group nogroup
Port                            21                                                                          
MaxInstances                    4
<Directory /*>                                                                                              
  Umask                         022  022                                                                    
  AllowOverwrite                on                                                                          
</Directory>

есть пользователь client c домашней директорией /home/client на которой права 700. client может по фтп заливать, переписывать, удалять файлы и директории
однако он не может изменять права и владельца файлов и директорий
тоесть chmod и chown по фтп не работают, хотя в шелле всё ок.