Shulou(Shulou.com)06/01 Report--

This article mainly explains "how to configure the FTP server under the linux system". The content of the article is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "how to configure the FTP server under the linux system".

1. Install vsftp

The rpm installation package for the vsftp server is included in the rhel4 system, and the package name is vsftpd-2.0.1-5.i386.rpm

# rpm-ivh vsftpd-2.0.1-5.i386.rpm

2. Basic configuration of vsftpd server

The configuration file for the vsftpd server is saved in the "/ etc" directory and its subdirectories.

(1) configuration items in vsftpd.conf file

All configuration records in the vsftpd.conf file include configuration items and configuration values, with an equal sign in the middle.

Anonymous_enable=YES

(2) default configuration of vsftpd server

The default configuration in the vsftpd.conf file is used for the most commonly used FTP server configuration requirements, and the configuration file with the stripped comment line includes the following configuration:

# grep-v'# 'vsftpd/vsftpd.conf

Anonymous_enable=YES

Local_enable=YES

Write_enable=YES

Local_umask=022

Dirmessage_enable=YES

Xferlog_enable=YES

Connect_from_port_20=YES

Xferlog_std_format=YES

Pam_service_name=vsftpd

Userlist_enable=YES

Listen=YES

Tcp_wrappers=YES

The default configuration in the vsftpd.conf file has the following meaning:

L anonymous_enable=YES, indicating that FTP allows anonymous login

L local_enable=YES, which allows local users to log in

L write_enable=YES, indicating that the FTP server is open to write permissions for local users

L local_umask=022, which sets the file generation mask for local users

L dirmessage_enable=YES, when you change to a directory in the FTP server, the contents of the implied file ".message" in that directory will be displayed.

L xferlog_enable=YES,FTP will enable uploading and downloading logs

L connect_from_port_20=YES,ftp will enable connection requests for ftp data ports

L xferlog_std_format=YES,ftp will use the standard ftpd xferlog log format

L pam_service_name=vsftpd, set the name of the configuration file for the PAM authentication service, which is saved in the "/ etc/pam.d/" directory.

L userlist_enable=YES,ftp will check whether the user specified in the userlist_file settings file can access the vsftpd server

L listen=YES,ftp server will be in stand-alone startup mode

The tcp_wrappers=YES,ftp server will use tcp_wrappers as the host access control mode.

3. Vsftpd.ftpusers file

The vsftpd.ftpusers file is located in the "/ etc" directory and is used to save local user accounts that are not allowed to log in to ftp. These accounts (including root users) are usually not ordinary user accounts, but accounts with higher privileges in the system. Banning these users can improve the security of the system.

4. Vsftpd.user_list file

Vsftpd.user_list files are located in the "/ etc" directory and have access control features similar to vsftpd.ftpusers files, but are more flexible to use.

(1) set up the user account for login

When the following settings are included in the vsftpd.conf configuration file, the user account in the vsftpd.user_list file is prohibited from logging in to ftp.

Userlist_enable=YES

Userlist_deny=YES

The userlist_deny setting uses the vsftpd.user_list file, and the userlist_deny setting to YES indicates that the vsftpd.user_list file is used to set the user account that forbids login.

(2) set up user accounts that only allow login.

When the following settings are included in the vsftpd.conf configuration file, only the user account in the vsftpd.user_list file can log in to ftp

Userlist_enable=YES

Userlist_deny=YES

The userlist_enable setting uses the vsftpd.user_list file, and the userlist_deny setting to NO means that the vsftpd.user_list file is used to set user accounts that are only allowed to log in, and user accounts not included in the file are prohibited from logging in ftp.

5. Anonymous user login directory

When users log in to the FTP server anonymously, they will enter the "/ var/ftp" directory and use this directory as the root directory, that is, anonymous users cannot leave the directory and can only enter subdirectories of the directory.

6. Start the vsftpd service

# service vsftpd restart

7. Test the ftp server

Thank you for your reading, the above is the content of "how to configure the FTP server under the linux system". After the study of this article, I believe you have a deeper understanding of how to configure the FTP server under the linux system. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.