Open the VSFTPD port under the iptables firewall

After opening the VSFTPD port, it is found that the client tool can log in, but cannot browse the files and create new files. At this point, I looked at the FTP protocol, and found that FTP has active mode and passive mode. Open port 21 on the server is to let the client come in, and do not go out of the port, also on the server open port, Finally add the corresponding module FTP, the whole operation is a bit complicated, today write down on their own later to deepen the image.

--------------------------------------Split Line--------------------------------------

Four high-level configurations for VSFTPD server: http://www.linuxidc.com/Linux/2013-09/90565.htm

VSFTPD Configuration Tutorial: http://www.linuxidc.com/Linux/2013-09/90562.htm

Ubuntu Utility Simple FTP Erection http://www.linuxidc.com/Linux/2012-02/55346.htm

Set up an FTP server and Apache server on Ubuntu http://www.linuxidc.com/Linux/2011-04/35295.htm

Ubuntu 13.04 Installation lamp\vsftpd\webmin\phpmyadmin services and Settings http://www.linuxidc.com/Linux/2013-06/86250.htm

A simple case of anonymous uploading of SELinux and VSFTPD under the RHEL6 platform http://www.linuxidc.com/Linux/2013-04/82300.htm

Linux system VSFTPD Source Installation http://www.linuxidc.com/Linux/2013-03/81475.htm

VSFTPD Security Configuration Case Study http://www.linuxidc.com/Linux/2012-12/76501.htm

--------------------------------------Split Line--------------------------------------

1. Installing the VSFTPD Software

Yum Install Vsftpd-y

2. Turn on anonymous access and passive mode ports

Vim/etc/vsftpd/vsftpd.conf

Anonymous_enable=yes--Turn on anonymous user access

Anon_upload_enable=yes--Anonymous user name can upload files

Anon_mkdir_write_enable=yes--Anonymous users can create files
Anon_other_write_enable=yes--Anonymous users can rename files

Pasv_enable=yes--Turn on Passive mode
pasv_min_port=30000--Passive mode min port
pasv_max_port=31000--Passive mode maximum port

3. Loading the FTP module

Vim/etc/modprobe.d/vsftpd.conf

Alias Ip_conntrack ip_conntrack_ftp ip_nat_ftp--Loading FTP module

Vim/etc/rc.local

/sbin/modprobe ip_conntract--Boot load module
/sbin/modprobe ip_conntrack_ftp
/sbin/modprobe ip_nat_ftp

4. Port filtering

Vim/etc/sysconfig/iptables

-A input-p tcp-m multiport--dport 20,21-m State--state new-j ACCEPT--Open 20,21 port
-A input-p tcp-m state--state new-m TCP--dport 21-j ACCEPT--open 21 active port
-A Input-p TCP--dport 30000:31000-j ACCEPT--Open passive port

5. Login Test

This article permanently updates the link address : http://www.linuxidc.com/Linux/2014-11/109464.htm

Open the VSFTPD port under the iptables firewall