Install and Configure ftp In ubuntu (vsftpd)

Ubuntu
FTP software

There are a variety of: Google: a variety of general features:
Wu-FTP: Comparison

Old-fashioned, but there are many attacks against it, so it is difficult to set up, but it has powerful functions.
ProFTPD: implements all functions of Wu-FTP and server-U. High Security, but slightly more complex than vcftpd configuration.
Vsftpd: Powerful and easy to configure

Vsftpd is selected because it is secure and fast.
Select ProFTPD and occasionally see Webmin support

It's convenient.

Serv-U is widely used in windows. Serv-U is convenient, but the biggest problem is piracy.

Vsftpd is mostly the FTP software that comes with Linux systems, and websites such as FreeBSD are all used, and the configuration is much simpler, so we also adopt vsftpd

Installation:
Sudo apt-Get install vsftpd
Configuration:
Back up the source file:
Sudo CP/etc/vsftpd. CONF/etc/vsftpd. conf. Old

Then modify
Sudo VI/etc/vsftpd. conf

Anonymous_enable = Yes (anonymous login allowed)
Dirmessage_enable = Yes (The. Message content under the directory is displayed when the directory is switched)
Local_umask = 022 (local file permission on FTP, default: 077)
Connect_form_port_20 = Yes (enable data connection on the FTP data port )*
Xferlog_enable = Yes (enable upload and download logs)
Xferlog_std_format = Yes (use the standard log format)
Ftpd_banner = XXXXX (welcome information)
Pam_service_name = vsftpd (Verification Method )*
Listen = Yes (independent vsftpd service

)*
Function: You can only connect to the FTP server, but cannot upload or download files.
Note: All links related to log welcome information are optional. If an asterisk is used, all accounts must be added.

Option

Enable Anonymous FTP Server Upload permission
Add the following information to the configuration file:

Anon_upload_enable = Yes (Open upload permission)
Anon_mkdir_write_enable = Yes (you can create a directory and upload files to it)
Write_enable = Yes (grant write permission to local users)
Anon_other_write_enable = Yes (anonymous accounts can have the permission to delete)
Enable the permission for downloading an anonymous server
Anon_world_readable_only = No
Note: Pay attention to the folder attributes. An anonymous account is another (other) user who wants to enable its read and write permissions.
(R) read ----- download (w) Write ---- upload (x) execute ---- if FTP directory is not enabled
Local_enble = Yes (the local account can log on)
Write_enable = No (You are not authorized to delete or modify files after logging on to the local account)
Function: You can use a local account to log on to the vsftpd server and have the permission to download and upload files.
Note: The anonymous server can log on but cannot upload or download the information that disables Anonymous logon.

User Login is restricted to other directories, but only to its main directory
Set all local users to execute chroot

Chroot_local_user = Yes (all local accounts can only be in their own directories)
Set the specified user to execute chroot

Chroot_list_enable = Yes (the list in the file can be called)
Chroot_list_file =/any specified path/vsftpd. chroot_list
Note: vsftpd. chroot_list is not created and needs to be added by yourself. To control the account, add the account directly in the file.

Restrict access by local users

FTP
Userlist_enable = Yes (use userlistlai to restrict user access)
Userlist_deny = No (users in the list are not allowed to access)
Userlist_file =/Specify the path where the file is stored/(the path where the file is stored)
Note: Enabling userlist_enable = yes for anonymous accounts cannot log on

Security Options
Idle_session_timeout = 600 (seconds) (10 minutes after the user's session is idle)
Data_connection_timeout = 120 (seconds) (idle 2 minutes)
Accept_timeout = 60 (seconds) (disconnect the client one minute later)
Connect_timeout = 60 (seconds) (disconnect again after 1 minute)
Local_max_rate = 50000 (BITE) (Local User transfer rate: 50 K)
Anon_max_rate = 30000 (BITE) (anonymous user transfer rate: 30 K)
Pasv_min_port = 50000 (change the client's data connection port
Pasv_max_port = 60000 between and)
Max_clients = 200 (maximum number of FTP connections)
Max_per_ip = 4 (maximum number of connections per IP)
Listen_port = 5555 (data connection from port 5555)
Check who logged on to FTP and killed the FTP process.
PS-XF | grep FTP
Kill process number

Configuration
When setting, pay attention to the File Permission issue. After enabling anonymous and local, the key is to set the File Permission. To assign different permissions to different users, you can generate a group, such as ftpuser, then assign
Grant it the permission when, for example, 755. The chroot () setting can restrict local users to directories during logon. This is very important for security. It can be local_root that specifies local user login.
Directory in/home.

 

Http://www.linuxidc.com/Linux/2008-01/10640.htm