Management Method and Function Analysis of Serv-U Server

Source: Internet
Author: User
Tags ftp site remote ftp server ftp client

Compared with IIS, Serv-U has much more powerful management functions and is easy to set. Note that you must click the "save" button in the toolbar in the upper-left corner of the interface to make any settings or changes take effect.

1. Account Management

Serv-U can easily manage an account. It can not only manage a single account, but also group multiple accounts with the same permissions for unified management.

1) Add/delete a single account

In the left-side window, find "user", right-click, and select "new user ", set "User Name", "password", "main directory" (the directory location after the account is logged on), and "lock the user in the main directory" to create a new account. Sometimes we need to create a batch of accounts with the same home directory, such as A1, A2, A3 ...... If you create one by one, it is troublesome. You can use the "copy user" function. Create an A1 user, right-click the Account "A1", select "copy user", and change the account name to A2 and A3. In this way, except for different accounts, the other settings, including passwords, are the same.

2) Add/delete a group

If a batch of accounts, such as A1, A2, and A3, have the same access Home Directory and IP address access rules, they can be set to a group for unified management, any settings made to the Group will take effect for all account members of the group at the same time. Right-click "group" and select "New Group". Enter the group name to create a new group. The newly created group does not have any account members. You also need to add these member accounts to the group one by one. Select the account to be added, and select the group to be added in the "Group" in the window on the right. Except for the anonymous account, any account can join one or more groups at the same time. To delete this account from this group, leave it empty. To delete a group, right-click the group name and click "Delete group. Similarly, a group can be copied like a single account by right-clicking a group and then clicking "Copy group ".

3) set the account Validity Period

If some accounts violate your rules, you can deny this account for a period of time. During this period, any user will be denied to log on to the server using this account. You only need to select this account and select "forbidden account" on the "Account" tab on the right. to unban the account, remove "√. For some temporary accounts, if they are deleted one by one after expiration, it is obviously a big test for your memory. Serv-U provides a solution to automatically delete this account upon expiration. Select "auto Delete account on Date" and set the expiration date in the drop-down box that follows. The system will automatically delete the account based on the specified date.

2. Set the virtual directory

Like IIS, Serv-U also provides the virtual directory setting function. Suppose we want to map the "G \ movie \ DVD film" directory to the "DVD" directory under the FTP main directory, and click "set ", under the "General" tab, there is a "virtual path ing". Click "add" and enter "g \ movie \ DVD film" in "physical path ", enter "% home %" or the absolute path of the FTP home directory in "ing physical path", enter "DVD" in" ing path name", and then 4. Finally, go to the user's "Directory Access" tab and add the "G \ movie \ DVD film" directory. Log on to FTP using this account and you will see an additional DVD directory.

3. Set Directory Permissions

Unlike IIS, Serv-U sets different access directories Based on the account. When creating an account, you must select the directory location after logon. Different accounts can be different. Each directory has the following permissions:

1) File Operations

Read: allows users to download files from the server;

Write: You can upload files to the server, but cannot modify, delete, or rename the files;

Append: You can append content to an existing file or resume the upload. This directory can be resumed only when this option is selected;

Delete: allows users to modify, rename, and delete files;

Execute: execute commands through FTP. Use this permission with caution. Otherwise, security problems may occur.

2) Directory operations

List: allows the user to obtain the file list under the directory. If this option is not selected, the user cannot see anything;

Create: allows users to create new subdirectories under this directory. Many upload users usually upload the entire directory when uploading files. If this option is not selected, users can only upload files one by one, instead of uploading by directory;

Delete: allows users to delete directories.

3) subdirectory operations

Inheritance: access rules of the parent directory are automatically applied to sub-directories.

As a webmaster, you must not only have a detailed understanding of these permissions, but also learn to properly set permissions for different users in each directory. Generally, it is better for normal or anonymous users to grant only the read and directory list permissions to facilitate management and improve the security of the FTP server. For upload users, a special account should be set up to grant read, write, append, directory list, and create permissions. For special users, grant as few permissions as possible, especially the "execution" permission. To set permissions, go to the "Directory Access" tab of each user or group and set the permissions as needed.

4. Message settings

When you use cuteftppro to log on to an FTP, some information such as "welcome to this site" is sometimes displayed in the status window. This is the message. Many FTP webmasters do not pay much attention to logging in/out/changing the message settings of the directory. In fact, if they are set properly, they will not only facilitate the access of users, especially upload users, it also makes FTP look more personalized and professional.

Select "Settings" and find the "messages" tab in the right window. The "Server Response Information" is default by the system and generally does not need to be modified. Note that the following four options need to be set:

"Start Tag Information": Specifies the file location that contains the welcome information when the user logs on successfully;

"Close Tag Information": Specifies the file location that contains information displayed when the user is disconnected;

"Change the main directory of the message file": Specifies the file location where information is displayed when the user changes the directory;

"Change message file directory": Specifies the file location where information is displayed when the user changes the Directory and the file does not find the main file.

Take the welcome information displayed when logon is successful as an example. Create a text file named "Logon" and open it. Enter the following information:

Welcome to xxx's personal FTP Server

Your IP address is: % IP

The current server time is % time

% U24h users have accessed the FTP in the last 24 hours

The FTP server has been running for % serverdays % serverhours hours.

Server running status:

Total number of logged-on users: % loggedinall total

Current number of logged-on users: % unow

User space used quota: % quotaused KB

Available space quota: % quotaleft KB

Remaining user space: % dfree KB

Maximum available disk space: % quotamax KB

Among them, all variables starting with % are some variables (for more variables, please query the Help File of Serv-U). You can change XXX to your name, you can also add some text you like, but each line should contain up to 70 English characters. Enter the address of the logon.txt file in the "register start information" text box, save the file, and log on with CuteFTP. The prompt message is displayed. In this way, for users who want to upload files, it is clear how much space the server has available for uploading.

Tip: for each account, you can also set the prompt message that appears when the user logs on with this account. On the "General" tab of this account, find "Log on message file" and select the "good news file" directory. The advantage is that we can set up an account dedicated to upload, and then set the upload-related details to a message file for the user's reference.

5. Set the upload/download rate

Each user's setting option has a "upload/download rate" tab. The so-called "upload/download rate" is actually a credit mechanism for users to upload and download files. As a webmaster, I hope users can upload valuable things for sharing, not just the resources provided by FTP. By setting the "upload and download ratios", the Webmaster can limit the number of files that can be downloaded after each file is uploaded by FTP users. After the upload/download ratio is enabled, Serv-U provides four counting methods:

"Count each task file": calculates the uploaded/downloaded files of each individual FTP task at this rate;

"Count the bytes of each task": calculates the bytes of the upload/download files for each individual FTP task at this rate;

"Count all task Files": calculates the uploaded/downloaded files of all FTP tasks at this rate;

"Count all task bytes": calculates the bytes of uploaded/downloaded files for all FTP tasks at this rate.

Take "count each task file" as an example. If in the "ratio" option, "Upload" is set to 1, and "Download" is set to 4, this account uploads one file each time, you can download four files from ftp.

However, the "upload/download rate" has a problem: what if there is a directory or file in FTP that does not need to be included in the upload/download rate? You can set the upload/download rate on the "set" tab. Click "add", enter a directory or file that does not need to be included, and click "OK. If there are multiple directories or files, repeat this operation.

6. User Quota Management

The "upload/download rate" can effectively motivate users to actively upload files to obtain the download permission. However, new problems also arise: as users upload files, hard Disk Space will soon be occupied by these files. If a user uploads a large number of files, when the hard disk space remains unchanged, it will also affect other users's control over the size of the available upload space. In this case, you need to manage the user quota.

Like the "upload/download rate", Serv-U can allocate a disk quota to each user. Select the user you want to set and select "enable Disk Quota" in "quota. Click the "calculate current" button at the bottom, and the "current" displays the hard disk space currently available for this user account, in "Max", enter the maximum disk space allocated to this user account. Note that the unit here is kb.

7. Manage activity users

The forest is big and there are all birds. Not every user who logs on to the FTP server is well-behaved. This requires the webmaster to manage the online users connected to the server. Click "activity" under "Domain" on the left of the main interface and manage it in the "user" tab on the right. Select a user and right-click the user to display the operations that can be performed in the pop-up menu.

"Overload information": Used to reload the user information, which is equivalent to refreshing.

"Send message": sends a text message to the selected user. The sent message appears in the status window of the user's FTP client software.

Broadcast: send text messages to all active users.

"Stop Transfer": If you are uploading or downloading files, you can abort this upload or download operation without kicking the user to the server.

"Remove User": whether or not the user is uploading or downloading files, the user is kicked out of the server.

"Monitor user": monitors all operations of the user in real time, but does not execute any other management commands for the user. After selection, a tab named after the user account is displayed next to the "Domain log" tab, which displays all the operation information of the user in real time. To disable monitoring, right-click the tab and select "disable monitoring.

The "Domain logs" tab is used to record the account name, Logon Time, IP address, and logout time used by each user logging on to the server in real time, so that the Webmaster can understand the basic information of the user logging on to the server. By default, the log is updated in real time, but if you select "freeze" next to it, the update will stop.

Tip: monitoring a user will occupy a large number of resources on the server. If the number of active users is large, please use this function with caution.

8. Edit an IP address access rule

Users that disrupt server order but are not convenient to delete their accounts can use "Edit IP access rules" to allow or block access from specific IP addresses. Serv-U is flexible in setting user IP access rules. You can set not only the user IP addresses that are allowed to access the server, but also the user IP addresses that are not allowed to access the server; you can not only edit each account, but also edit all accounts on the server in a unified manner. You can also edit "" and "?" Wildcard.

1) Access Denied

If it is not convenient for a user to delete his/her account, he/she can find the IP address connected to the user from the domain log. In the "Rules" text box, click "add". Serv-U will add this rule to the "IP access rules" list box below. This is quite effective for users with fixed IP addresses. However, if the user is a dial-up Internet user, a new IP address will be obtained as long as the user is re-called after the disconnection. Obviously, this IP address access rule has expired for the user. To solve this problem, the wildcard and "-" characters are used. Suppose the IP address of the user we want to block is 192.168.x.x, you can enter 192 in the "rule. 168 .., you can also enter 192. 168. ﹖. -192. 168. ﹖﹖﹖.? Or 192.168.0.0-192.168.255.255. The rational use of these symbols can also effectively prevent hacker attacks.

2) Allow access

If you want to use your FTP site only for a few specific users, you can select "Allow access", enter the IP address of a specific user in "rules", and click "add ". Similarly, if the IP address of a specific user is a dynamic IP address, you can use the wildcard character and the "-" symbol to set the IP address.

In fact, as a webmaster, the two rules need to be flexibly mixed in more cases, such as setting an IP address from the IP address that denies access to allow access, or vice versa. It should be noted that for some LAN users, such as Internet cafes, if the IP address is set to deny access, the whole LAN will be blocked by the server.

9. server bandwidth and other resource management

For servers, the most important thing is how to ensure that system resources such as server bandwidth and their performance are not wasted. To do this, you also need to make some settings to go to the "local server → settings → General" tab.

"Maximum speed": the maximum bandwidth available (KB/second). Enter the appropriate value based on the total bandwidth resources of the server. If no value is specified, Serv-U will use all available bandwidth. When the number of connected users reaches a certain value, other network applications on the server will become unavailable. Take 512 kbps ADSL as an example. It is best to set it to 50kb/s or below.

"Maximum number of users": set the maximum number of users allowed to connect to the server at the same time. Because every user connected to the server consumes a certain amount of bandwidth even if they do not upload or download any files, it is best to set it. Otherwise, the system will not control the number of login users until all resources are exhausted.

"Delete some uploaded files": delete incomplete uploaded files. If this option is selected, the system automatically deletes files that are not fully uploaded to maximize the disk space on the server. Whether or not to select, depending on the size of the files uploaded by the server users at ordinary times.

"Disable anti-Timeout scheduling": Many FTP servers set a timeout to prevent users from occupying bandwidth and connections for a long period of time. When the user's connection exceeds a certain period of time but does not perform any operations, it will be automatically kicked out by the server. To address this, some FTP clientsProgramSome commands are automatically sent to the server to ensure that they are not kicked out. If this option is selected, the server uses a unique timing method to prevent the anti-timeout settings of the FTP client program. We recommend that you select.

"Intercepted connection exceeds × × seconds × minutes": used to set the IP address to be blocked × minutes if a user continuously connects × times within × seconds, this effectively prevents users from connecting to the server by using high-speed multi-thread download software such as network ant Financial.

The preceding settings are valid for all servers in the "domain. However, these settings are too superficial for a specific FTP server or an account, which is not conducive to meticulous management. But it doesn't matter. Serv-U provides detailed settings for each account under each server. You can go to the "General" tab of the Account:

"Only allow X to log on from the same IP address": many users often open more than two FTP clients to log on to the client at the same time to save the download wait time when downloading two or more files. For the server, each login process is actually a user, which not only occupies the system bandwidth, but also occupies the login right of other users. This requires you to select this option to prevent this situation. After selection, the server only allows a single IP address to have a maximum of X connections at the same time.

"Maximum upload speed and maximum download speed (KB/sec)": used to set the maximum upload/download speed for this account user. For a specific account, you can set a higher level than the general account to reflect the privileges.

"Idle time-out and task time-out (seconds)": "idle time-out" is used to set the server to automatically kick off when the user's idle time exceeds a certain period of time to avoid occupying resources, the "task timeout" setting means that when you perform each task with the server, it will be automatically kicked out by the system after a certain period of time.

"Maximum number of users": set the maximum number of users who log on to the server with this account within the same time period.

After completing these settings, you actually have a quasi-Professional FTP server under quasi-professional management level. The only reason is the quasi-professional management level, because you have not yet implemented the most fashionable and dazzling remote management function.

10. remote FTP Server Management

Have you ever thought about setting up an FTP server at home and setting up and managing the server in the office like sitting at home? Serv-U provides this remote management function. For convenience, let's assume that we have set up an FTP server named "myftp" with Serv-U at home. The address is FTP // 218.1.1.1 and port is 21, now you need to remotely manage your account with the username and password DYS in the office.

1) create an account with remote management Permissions

Create a new user with the username and password set to dys. After creation, go to the "Account" tab of the dys account and find the "permission" drop-down list box. In addition to the "no permission" of general users, four remote permissions are available:

"Group Administrator": users in this group can be managed remotely, but servers cannot be managed.

"Domain administrator": You can perform remote management, but you can only manage the domain. You cannot add a new domain.

"System Administrator": You can perform remote management and have full permissions.

"Read-Only Administrator": used for remote diagnosis. You can see all the server settings but cannot modify them.

Here, we select "System Administrator" and save it.

2) install and set Serv-U on the office machine

After installation, you can enter the Server Setup Wizard as needed. Select "Serv-U" server in the left window, right-click, and select "new server ". In the displayed wizard window, fill in the "ip address" to be managed Server IP address, Here fill in 218.1.1.1, "port number" fill in the managed server port, Here fill in 21. "FTP server name" can be used at will. Enter "Remote Management myftp" here ", in "User Name" and "password", enter the account name and password with remote management permissions set on the managed server.

3) establish a connection with the remote FTP server and manage it

Double-click "Remote Management myftp" to establish a connection with the home server. After the connection, you can set and manage the server as you would at home. Is it very convenient.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.