Linux:vsftpd.conf Configuration function

No matter how I change the vsftpd.conf inside

Local_umask

The uploaded file attributes are always-RW-------

What's going on?

Using a virtual user login

What parameters are used to change the file properties uploaded by the virtual user?

The problem has been resolved

Other user property configuration functions other than local user

anon_umask=

Ah, so short also be added essence, thank the owner of the encouragement, I still put all the vsftpd.conf in the description of the function is more worthy of "essence" two words.

Original article Address http://www.uplinux.com/www/net/02/117.shtml

vsftpd.conf Settings section

Reference:

Setting options for VSFTPD

The VSFTPD configuration file/etc/vsftpd/vsftpd.conf is a text file. The line starting with the "#" character is the comment line. Each option is set to one line, and the format is "Option=value", noting that no whitespace is allowed on either side of the "=" number. In addition to this main configuration file, you can also set up a personal profile for specific users, specifically described in the post.

The vsftpd.conf file configuration in the VSFTPD package is relatively simple and very paranoid (the document claims to be:-)). We can set it up according to the actual situation to make the vsftpd more usable.

Connection options

This section is primarily about the options associated with establishing an FTP link.

Monitor address and control port

Listen_address=ip Address

This parameter is valid in VSFTPD using separate (standalone) mode. This parameter defines which IP address on the host listens for FTP requests, that is, which IP address provides the FTP service. You do not need to use this parameter for a host with only one IP address. For multiple-access hosts, this parameter is not set, and all IP addresses are monitored. The default value is None.

Listen_port=port_value

Specifies the port number (control port) that the FTP server listens on, and the default value is 21. This option takes effect in standalone mode.

FTP Mode and Data port

FTP is divided into two categories, PORT FTP and PASV ftp,port FTP is the general form of FTP. The two types of FTP operate the same way when establishing a control connection, and the client first establishes a control link with the FTP server's control port (the default value of 21) and transmits the operation instructions through this link. The difference is in how data transfer ports (Ftp-data) are used. Port FTP Specifies the ports used by the FTP server for data transfer, with a default value of 20. PASV FTP is the port that the FTP client determines the data transfer. PASV FTP This approach, mainly considering the existence of a firewall environment, by the client and the server communication (the client to the server to send data transfer requests included in the data transmission port), the decision between the two data transmission port more convenient.

Port_enable=yes|no

If you want to cancel port mode when data is connected, set this option to No. The default value is yes.

Connetc_from_port_20=yes|no

Controls whether 20 ports (ftp-data) are used for data transfer in port mode. Yes use, no no use. The default value is no, but this parameter is set to Yes in the vsftpd.conf file with RHL.

Ftp_data_port=port number

Sets the FTP data transfer port (ftp-data) value. The default value is 20. This parameter is used for port FTP mode.

Port_promiscuous=yes|no

The default value is No. When yes, cancels the port security check. This check ensures that outgoing data is only connected to the client. Be careful to open this option.

Pasv_enable=yes|no

YES, PASV mode is allowed when transferring data. No, you are not allowed to use PASV mode. The default value is yes.

Pasv_min_port=port number

Pasv_max_port=port number

Set in PASV mode, the lower and upper bounds of the port range can be used to establish the data transmission, and 0 indicates arbitrary. The default value is 0. Setting the port range in a relatively high range, such as 50000-60000, will help improve security.

Pasv_promiscuous=yes|no

When this option is activated, the security check for PASV mode is turned off. This check ensures that data connections and control connections are from the same IP address. Be careful to open this option. The only reasonable use of this option is in an organization composed of a secure tunneling scheme. The default value is No.

pasv_address=

This option is a numeric IP address, as a response to the PASV command. The default value is None, that is, the address is obtained from the incoming connection socket (incoming CONNECTD socket).