PureftpdIs an Ftp program. Let's take a look at one of his configurations: Anonymous User Login
- # vi /usr/local/pureftpd/etc/pure-ftpd.conf
If you want to only support Anonymous logon in the default configuration file, you just need to modify it a little bit:
ChrootEveryone yes // restrict all users to their home directories
AnonymousOnly yes // whether to allow anonymous logon only
NoAnonymous no // anonymous connection is not allowed, Only Authenticated Users are allowed to use
AnonymousCanCreateDirs yes // allows anonymous users to create new directories
MaxLoad 4 // if the system is loaded beyond the following values, anonymous users will be banned from downloading
AnonymousRatio 1 10 // upload/download ratio of Anonymous Users
AnonymousBandwidth 8 // maximum bandwidth of anonymous users (KB/s)
AllowAnonymousFXP yes // anonymous and non-Anonymous Users are allowed to perform anonymous FXP Transmission
AnonymousCantUpload no // anonymous users are not allowed to upload new files (no = upload is allowed)
# Can a file starting with (".") be read/written?
Follow the preceding settings to perform anonymous Ftp connection. If the error "421 failed to establish secure anonymous FTP" occurs, check your system account, it is possible that you optimized the FTP account when creating the system. If so, run
- # useradd ftp -g ftp -d /var/ftp -s /sbin/nologin
If an account exists, check whether the main directory of the account exists. If the account does not exist, the preceding error is prompted.
After testing, the server is restarted after configuration based on the preceding configuration file. Anonymous Users can upload files, but cannot download or delete the files. Implements Secure Anonymous ftp upload.
When you download the file, you can see that the download is not approved by the Administrator. How does this happen? In fact, it's easy to do with a single parameter.
AntiWarez yes // it means that the download of an object whose owner is "ftp" is not accepted. What if we set it to "no? Obviously, we can download the file, but because the AnonymousRatio parameter exists, we need to upload the file first and then download it. This is very interesting. Now, we will introduce the Anonymous User Login here.
Through the introduction of the article, we understand that the Pureftpd configuration is simple for anonymous user login.
- Pureftpd installation documentation
- PureFTPd configuration file
- PureFTPd displayrate () Remote Denial of Service Attack Vulnerability
- PureFTPd Accept_Client Remote Denial of Service Vulnerability