CentOS6.5 Building an FTP server

FTPis Filetransfer Protocol (File Transfer Protocolenglish abbreviation, and Chinese Jane is called "the Interfax agreement". For use on the InternetControl Filestwo-way transmission. At the same time, it is also aApplication(application). There are different FTP applications based on different operating systems, and all of these applications follow the same protocol to transfer files. In the use of FTP, users often encounter two concepts: "Download" (Download) and "Upload" (Upload). A "Download" file is a copy of a file from a remote host to its own computer; the "upload" file is a copy of the file from your computer to a remote host. In the Internet language, users can upload (download) files to (from) a remote host through a client program.

vsftpd is the "very secure FTP daemon" abbreviation, security is one of its biggest features. VSFTPD is the name of a server running on UNIX-like operating systems, which can run on systems such as Linux, BSD, Solaris, Hp-unix and so on, is a completely free, source-coded FTP server software that supports many other FTP Features that are not supported by the server. For example: Very high security requirements, bandwidth constraints, good scalability, can create virtual users, support IPV6, high rate. [2]

vsftpd is one of the most respected Linux distributions FTP Server program. Features are small and light, safe and easy to use.

Let me take centos6.5 as an example to demonstrate the simple configuration of VSFTPD

1, first check if the VSFTPD software is installed

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4A/wKioL1WXu8_BFo-HAABTOiPmyhs522.jpg "title=" 1.png " alt= "Wkiol1wxu8_bfo-haabtoipmyhs522.jpg"/>

2 . If not installed, can be installed via Yum online

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXvG_xeAIhAAGBRuLUzuk109.jpg "title=" 2.png " alt= "Wkiol1wxvg_xeaihaagbruluzuk109.jpg"/>

3 . VSFTPD The default port is 21, but we can modify it in the config file, no matter what port is changed to open in the firewall configuration, such as I want to use 2121 port, and then restart the firewall.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4D/wKiom1WXuZewGyt_AARlTO3aFg4032.jpg "style=" float: none; "title=" 3.png "alt=" Wkiom1wxuzewgyt_aarlto3afg4032.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4D/wKiom1WXuxqTaFvrAACTe5cef7I532.jpg "title=" 4.png " alt= "Wkiom1wxuxqtafvraacte5cef7i532.jpg"/>

4. in order to properly log on to the vsftpd Server, you need to remove the SELinux protection, or you cannot read the FTP Directory.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXvSyRyuonAADu6AYdqkM049.jpg "title=" 5.png " Width= "806" height= "border=" 0 "hspace=" 0 "vspace=" 0 "style=" width:806px;height:115px; "alt=" Wkiol1wxvsyryuonaadu6aydqkm049.jpg "/>

5 . Start the VSFTPD service and set it to boot to check the running status

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4A/wKioL1WXu2TR4FhvAAGJI0KOPT4290.jpg "style=" float: none; "title=" 6.png "alt=" Wkiol1wxu2tr4fhvaagji0kopt4290.jpg "/>

6. Modify the default port,

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4D/wKiom1WXuaOwqrd-AAaTOyly2Jw050.jpg "style=" float: none; "title=" 7.png "alt=" Wkiom1wxuaowqrd-aaatoyly2jw050.jpg "/>

7. Modify the configuration file needs to restart the vsftpd service, this thing requires frequent operation

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXu23BkkhdAADXjSQKxaw677.jpg "style=" float: none; "title=" 8.png "alt=" Wkiol1wxu23bkkhdaadxjsqkxaw677.jpg "/>

8. Several ways to access the FTP server: the recommended use of filezilla

①

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4D/wKiom1WXuaaxqlH_AACpsAORmks920.jpg "style=" float: none; "title=" 9.png "alt=" Wkiom1wxuaaxqlh_aacpsaormks920.jpg "/>

Ii

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXu3Lxjd79AAGLg_wlb7k200.jpg "style=" float: none; "title=" 10.png "alt=" Wkiol1wxu3lxjd79aaglg_wlb7k200.jpg "/>

③

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4A/wKioL1WXu3OjZ83cAAFRU0fdSDs205.jpg "style=" float: none; "title=" 11.png "alt=" Wkiol1wxu3ojz83caafru0fdsds205.jpg "/>

④ uses some clients such as WinSCP , FileZilla

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4D/wKiom1WXuazSlAc3AAMDhZ_6648727.jpg "style=" float: none; "title=" 12.png "alt=" Wkiom1wxuazslac3aamdhz_6648727.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXu3agvX-IAAE3rlwp9c0995.jpg "style=" float: none; "title=" 13.png "alt=" Wkiol1wxu3agvx-iaae3rlwp9c0995.jpg "/>

9. limit upload Download bandwidth

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4D/wKiom1WXua2hx4phAADRRP2w3k8486.jpg "style=" float: none; "title=" 14.png "alt=" Wkiom1wxua2hx4phaadrrp2w3k8486.jpg "/>

Configuring bandwidth for a specific user

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXvtHhVHv7AACBOTcJ2gI103.jpg "title=" 34.png "alt=" Wkiol1wxvthhvhv7aacbotcj2gi103.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXu3iwhOnEAADg7fJ9FM8133.jpg "style=" float: none; "title=" 15.png "alt=" Wkiol1wxu3iwhoneaadg7fj9fm8133.jpg "/>

One . Limit the IP addresses that clients can connect to

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXvvrCoIcLAAA4yo5sl_Q310.jpg "title=" 16.png "alt=" Wkiol1wxvvrcoiclaaa4yo5sl_q310.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4A/wKioL1WXu3mAazkYAAOeOPvXMy0842.jpg "style=" float: none; "title=" 17.png "alt=" Wkiol1wxu3maazkyaaoeopvxmy0842.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4D/wKiom1WXubHTdKQpAAMLyNr0jDI087.jpg "style=" float: none; "title=" 18.png "alt=" Wkiom1wxubhtdkqpaamlynr0jdi087.jpg "/>

Restrict blacklisted users, the system by default, some ftp -independent accounts added to the blacklist

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXu3yBTuhkAACUZg__A1c201.jpg "style=" float: none; "title=" 19.png "alt=" Wkiol1wxu3ybtuhkaacuzg__a1c201.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4D/wKiom1WXubWS7LdqAAMGPBuIu0I550.jpg "style=" float: none; "title=" 20.png "alt=" Wkiom1wxubws7ldqaamgpbuiu0i550.jpg "/>

with Tom error when landing

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXu3-yrGJVAACJGWxVI9I190.jpg "style=" float: none; "title=" 21.png "alt=" Wkiol1wxu3-yrgjvaacjgwxvi9i190.jpg "/>

prohibit anonymous users from logging in

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4D/wKiom1WXubbg3TopAACwoDFUrZI834.jpg "style=" float: none; "title=" 22.png "alt=" Wkiom1wxubbg3topaacwodfurzi834.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4A/wKioL1WXu4GxlWLLAADIigbJR9Y033.jpg "style=" float: none; "title=" 23.png "alt=" Wkiol1wxu4gxlwllaadiigbjr9y033.jpg "/>

or direct prompt

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4D/wKiom1WXucDzN17QAAIy6BB-eQM287.jpg "style=" float: none; "title=" 24.png "alt=" Wkiom1wxucdzn17qaaiy6bb-eqm287.jpg "/>

limit The number of connections to an IP

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXu4rS3E17AABdY481C_s938.jpg "style=" float: none; "title=" 25.png "alt=" Wkiol1wxu4rs3e17aabdy481c_s938.jpg "/>

Section 4 a login times wrong

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXu5HyWRw-AAScLzUrpAE740.jpg "style=" float: none; "title=" 26.png "alt=" Wkiol1wxu5hywrw-aasclzurpae740.jpg "/>

Set idle wait time 650) this.width=650; "Src=" http://s3.51cto.com/wyfs02/M02/6F/4D/ Wkiom1wxuciaow79aacpdirdm_8322.jpg "style=" Float:none; "title=" 27.png "alt=" wkiom1wxuciaow79aacpdirdm_8322.jpg "/ >

No user is allowed to switch directories, which is accessible by default .

Chroot_local_user Set the YES, all users will be chroot by default , and theUser directory is limited to their home , unable to change the directory up.
Chroot_list_enable set YESto make the chroot user list valid. If Chroot_local_user is set to Yes, then the user in the Chroot_list_file set file is not chroot user ( directory can be changed up )

if chroot_local_user is set to NO, then the user in the Chroot_list_file set file is chroot User ( Unable to change directory up )

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4A/wKioL1WXu5TR_XN2AAOBy9pYbxc029.jpg "style=" float: none; "title=" 28.png "alt=" Wkiol1wxu5tr_xn2aaoby9pybxc029.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4D/wKiom1WXucvg91GcAAFVVQSflUo799.jpg "style=" float: none; "title=" 29.png "alt=" Wkiom1wxucvg91gcaafvvqsfluo799.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4A/wKioL1WXu5XxhO7rAAGq17MfOp8166.jpg "style=" float: none; "title=" 30.png "alt=" Wkiol1wxu5xxho7raagq17mfop8166.jpg "/>

Specific users can switch directories

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/4D/wKiom1WXuczjcqzCAADAl6b79rk273.jpg "style=" float: none; "title=" 31.png "alt=" Wkiom1wxuczjcqzcaadal6b79rk273.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/4A/wKioL1WXu5bBR1PqAACFUYFUpGE633.jpg "style=" float: none; "title=" 32.png "alt=" Wkiol1wxu5bbr1pqaacfuyfupge633.jpg "/>

After successful switchover

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/4D/wKiom1WXv8_zqshHAAFOOGjXiD0200.jpg "title=" 33.png "alt=" Wkiom1wxv8_zqshhaafoogjxid0200.jpg "/>

This article is from the CentOS Systems Management blog, so be sure to keep this source http://zedjackie.blog.51cto.com/10309355/1670946

CentOS6.5 Building an FTP server