Cainiao in VSFTPD

Article title: Cainiao of VSFTPD. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
1. anonymous server connection (independent server)
Add the following items to the/etc/vsftpd. conf configuration file:
Anonymous_enable = yes (anonymous login allowed)
Dirmessage_enable = yes (the. message content under the Directory is displayed when the directory is switched)
Local_umask = 022 (local file permission on FTP, default: 077)
Connect_form_port_20 = yes (enable data connection on the FTP data port )*
Xferlog_enable = yes (enable upload and download logs)
Xferlog_std_format = yes (use the standard log format)
Ftpd_banner = XXXXX (welcome information)
Pam_service_name = vsftpd (verification method )*
Listen = yes (independent VSFTPD server )*
Function: you can only connect to the FTP server, but cannot upload or download files.
Note: all links related to log welcome information are optional. If an asterisk is used, all accounts must be added. this is a basic FTP option.
　　
2. enable anonymous FTP server Upload permission
Add the following information to the configuration file:
Anon_upload_enable = yes (open Upload permission)
Anon_mkdir_write_enable = yes (you can create a directory and upload files to it)
Write_enable = yes (Grant write permission to local users)
Anon_other_write_enable = yes (anonymous accounts can have the permission to delete)
　　
3. enable the permission for downloading anonymous servers
Add the following information to the configuration file:
Anon_world_readable_only = no
Note: pay attention to the folder attributes. an anonymous account is another (other) user who wants to enable its read and write permissions.
(R) read ----- download (W) write ---- Upload (X) execute ---- if FTP directory is not enabled
　　
4. connection to the FTP server of a common user (independent server)
Add the following information to the configuration file:
Local_enble = yes (the local account can log on)
Write_enable = no (you are not authorized to delete or modify files after logging on to the local account)
Function: you can use a local account to log on to the vsftpd server and have the permission to download and upload files.
Note: The anonymous server can log on but cannot upload or download the information that disables anonymous logon.
　　
5. user login is restricted to other directories, but only to its main directory
Set all local users to execute chroot
Chroot_local_user = yes (all local accounts can only be in their own directories)
Set the specified user to execute chroot
Chroot_list_enable = yes (the list in the file can be called)
Chroot_list_file =/any specified path/vsftpd. chroot_list
Note: vsftpd. chroot_list is not created and needs to be added by yourself. to control the account, add the account directly in the file.
　　
6. restrict access by local users to FTP
Userlist_enable = yes (use userlistlai to restrict user access)
Userlist_deny = no (users in the list are not allowed to access)
Userlist_file =/specify the path where the file is stored/(the path where the file is stored)
Note: enabling userlist_enable = yes for anonymous accounts cannot log on
　　
7. security options
Idle_session_timeout = 600 (seconds) (10 minutes after the user's session is idle)
Data_connection_timeout = 120 (seconds) (Idle 2 minutes)
Accept_timeout = 60 (seconds) (disconnect the client one minute later)
Connect_timeout = 60 (seconds) (disconnect again after 1 minute)
Local_max_rate = 50000 (bite) (local user transfer rate: 50 K)
Anon_max_rate = 30000 (bite) (anonymous user transfer rate: 30 K)
Pasv_min_port = 50000 (change the client's data connection port
Pasv_max_port = 60000 between and)
Max_clients = 200 (maximum number of FTP connections)
Max_per_ip = 4 (maximum number of connections per IP)
Listen_port = 5555 (data connection from Port 5555)
　　
8. check who logged on to FTP and killed the process.
Ps? Xf | grep ftp
Kill process number