Enable ftp in centos 6
1. Install the vsftpd component
[Plain] view plaincopy
- Yum-yinstallvsftpd
The ftp service is not started.
[Plain] view plaincopy
- Servicevsftpdstart
2. Install the ftp client component
[Plain] view plaincopy
- Yum-yinstallftp
Execute the command and try to log on
[Plain] view plaincopy
- Ftplocalhost
Enter the ftp user name and password (because anonymous access is allowed by default)
If the logon succeeds, the ftp service is available.
3. Cancel anonymous login
[Plain] view plaincopy
- Vi/etc/vsftpd. conf
Change anonymous_enable = YES in the first line to NO
Restart
[Plain] view plaincopy
- Servicevsftpdrestart
4. Create a new user (ftpuser is the user name and can be used as needed)
[Plain] view plaincopy
- Useraddftpuser
Change Password (twice)
[Plain] view plaincopy
- Passwdftpuser
After such a user is created, you can use this logon. Remember to use normal logon instead of anonymous logon. The default path after logon is/home/ftpuser.
5. Open Port 21
Because the default ftp port is 21, and centos is not enabled by default, You need to modify the iptables File
[Plain] view plaincopy
- Vi/etc/sysconfig/iptables
On the row, enter another line under 22-j ACCEPT, and change 22 to 21, and save the input.
And restart iptables.
[Plain] view plaincopy
- Serviceiptablesrestart
The Internet can be accessed, but the directory cannot be returned or uploaded because selinux is an exception.
6. Modify selinux
[Plain] view plaincopy
- Getsebool-a | grepftp
Run the preceding command, and then the returned result shows that both rows are off, indicating that Internet access is not enabled.
Allow_ftpd_full_access off
....
....
Ftp_home_dir off
You just need to turn all the above into on.
Run
[Plain] view plaincopy
- Setsebool-Pallow_ftpd_full_access1
- Setsebool-Pftp_home_dir1
Restart vsftpd.
[Plain] view plaincopy
- Servicevsftpdrestart
7. Enable passive Mode
It is enabled by default, but you need to specify a port range to open the vsftpd. conf file [plain] view plaincopy
- Vi/etc/vsftpd. conf
Add
Pasv_min_port = 30000
Pasvanderbilt max_port = 30999
Indicates the port range is 30000 ~ 30999. This can be changed at will.
Restart vsftpd.
[Plain] view plaincopy
- Servicevsftpdrestart
Because the port range is specified, iptables needs to enable the range accordingly, so open the iptables file as above.
It also starts another line on the upper and lower sides of 21, which is similar to that line, but changes the value of 21 to 30000: 30999, saves the line, and restarts iptables. This is done.
