Shulou(Shulou.com)06/02 Report--

Keywords: CentOS8/RHEL8; installation configuration FTP/ configuration VSFTPD; passive mode / PASV

# # after the release of CentOS8.0-1905, you try to migrate the FTP server to the new version of CentOS, but during the test, you are still unable to connect after opening the ftp service in the firewall. If you test with lftp or ftp tool, you will get an error of "no route to the host". However, when the firewall is turned off, the ftp service can be accessed normally.

# # in the process of querying relevant information, it is said that there is bug in the firewalld software, but if you try to install http, the test will be successful, indicating that there is no problem with the firewall.

# # continue to query relevant information and find that most client tools such as chrome, firefox or Filezilla use passive mode (PASV mode) to access ftp service by default, so it is guessed that the port is rejected when ftp works in passive mode.

# # after adding PASV-related settings in the vsftpd configuration file, and opening the specified port in the firewall, you can access it normally.

# the implementation steps are as follows:

1. Installation

Yum-y install vsftpd

2. Adjust the configuration

Vim / etc/vsftpd/vsftpd.conf

# # adjust the configuration as needed, such as enabling anonymous access

# # enabling Passive mode

#

# pasv_enable=YES # # enable

# pasv_min_port=10000 # # Open the lowest pasv port. It is recommended to use a high port greater than 1024

# pasv_max_port=11000 # # Open the highest pasv port

# # #

3. Adjust the firewall configuration

# # enabling ftp Server

Firewall-cmd-add-service=ftp-permanent

# increase ftp access

Firewall-cmd-add-port=10000-11000/tcp-permanent

# the above command, open the tcp port of 10000-11000

# add the corresponding udp port if necessary

Firewall-cmd-reload

# # reloading Firewall

4. Restart the ftp service and access it.

# # the above process has been tested and verified in CentOS8.0.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.