Install and start the FTP service in Ubuntu

Source: Internet
Author: User

All operations are under sudo su:
Installation:
$ Sudo su entry #
# Apt-Get install vsftpd
# Ps-E | grep FTP # Check whether startup is enabled

After the installation is complete, an FTP account may be automatically generated, and a folder will be added to/home.
If the user is not generated, You can manually generate the user:
Code:
Sudo useradd-M FTP
Sudo passwd FTP

You must change the permissions after you have an FTP account.
Code:
Sudo chmod 777/home/ftp

Configure ftp:
Back up the source file:
# Cp/etc/vsftpd. CONF/etc/vsftpd. conf_bak

Then modify
# Vi/etc/vsftpd. conf
Or
# Gedit/etc/vsftpd. conf (it is best to use gedit if you are not familiar with VI)

Anonymous_enable = Yes (anonymous login allowed)
Dirmessage_enable = Yes (The. Message content under the directory is displayed when the directory is switched)
Local_umask = 022 (local file permission on FTP, default: 077)
Connect_form_port_20 = Yes (enable data connection on the FTP data port )*
Xferlog_enable = Yes (enable upload and download logs)
Xferlog_std_format = Yes (use the standard log format)
Ftpd_banner = XXXXX (welcome information)
Pam_service_name = vsftpd (Verification Method )*
Listen = Yes (independent vsftpd server )*
Function: You can only connect to the FTP server, but cannot upload or download files.
Note: All links related to log welcome information are optional. If an asterisk is used, all accounts must be added. This is a basic FTP option.

Enable Anonymous FTP Server Upload permission
Add the following information to the configuration file:

Anon_upload_enable = Yes (Open upload permission)
Anon_mkdir_write_enable = Yes (you can create a directory and upload files to it)
Write_enable = Yes (grant write permission to local users)
Anon_other_write_enable = Yes (anonymous accounts can have the permission to delete)
Enable the permission for downloading an anonymous server
Anon_world_readable_only = No
Note: Pay attention to the folder attributes. An anonymous account is another (other) user who wants to enable its read and write permissions.
(R) read ----- download (w) Write ---- upload (x) execute ---- if FTP directory is not enabled
Local_enble = Yes (the local account can log on)
Write_enable = No (You are not authorized to delete or modify files after logging on to the local account)
Function: You can use a local account to log on to the vsftpd server and have the permission to download and upload files.
Note: The anonymous server can log on but cannot upload or download the information that disables Anonymous logon.

User Login is restricted to other directories, but only to its main directory
Set all local users to execute chroot

Chroot_local_user = Yes (all local accounts can only be in their own directories)
Set the specified user to execute chroot

Chroot_list_enable = Yes (the list in the file can be called)
Chroot_list_file =/any specified path/vsftpd. chroot_list
Note: vsftpd. chroot_list is not created and needs to be added by yourself. To control the account, add the account directly in the file.

Restrict access to FTP by local users
Userlist_enable = Yes (use userlistlai to restrict user access)
Userlist_deny = No (users in the list are not allowed to access)
Userlist_file =/Specify the path where the file is stored/(the path where the file is stored)
Note: Enabling userlist_enable = yes for anonymous accounts cannot log on

Security Options
Idle_session_timeout = 600 (seconds) (10 minutes after the user's session is idle)
Data_connection_timeout = 120 (seconds) (idle 2 minutes)
Accept_timeout = 60 (seconds) (disconnect the client one minute later)
Connect_timeout = 60 (seconds) (disconnect again after 1 minute)
Local_max_rate = 50000 (BITE) (Local User transfer rate: 50 K)
Anon_max_rate = 30000 (BITE) (anonymous user transfer rate: 30 K)
Pasv_min_port = 50000 (change the client's data connection port
Pasv_max_port = 60000 between and)
Max_clients = 200 (maximum number of FTP connections)
Max_per_ip = 4 (maximum number of connections per IP)
Listen_port = 5555 (data connection from port 5555)
Check who logged on to FTP and killed the FTP process.
PS-XF | grep FTP
Kill process number

Pay attention to file permissions during configuration. After anonymous and local access is enabled, the key is File Permission settings. To assign different permissions to different users, you can generate a group, such as ftpuser, then grant it the permissions such as 755. The chroot () setting can restrict local users to the directories at logon, which is very important for security, this can be the directory specified by local_root for local user logon. It is responsible for the corresponding directory in/home.

After the installation is complete, you can go to the GUI menu-> open a service item with a superuser

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.