RedHatAS5 Configure FTP and proxy servers

Because RedHatAS5 comes with vsftpd and the configuration file is also default, you only need to activate the service. Activation Method:/etc/init. d/vsftpdstart. You can use Anonymous Logon: ftp: // IP address 1, ftp, using vsftpd. Install vsftpd: RedhatAS5 comes with vsftp. After suffering for 1.5 days, the vsftp was handled. Compared with windows 1's servU, the function is similar, but servU

Because RedHat AS5 comes with vsftpd and the configuration file is also default, you only need to activate the service.

Activation Method:

/Etc/init. d/vsftpd start

You can use anonymous login:

Ftp: // IP

1. For ftp, vsftpd is used.

Install vsftpd:

Redhat AS5 comes with vsftp. After suffering for 1.5 days, the vsftp was handled. Compared with windows 1's servU, the function is similar, except that servU is all graph operations.

Installation: rpm-ivh vsftpd-2.0.5-10.el5.i386.rpm

Default installation Home Directory:/var/ftp

Vsftpd configuration Directory: The main configuration file of/etc/vsftpd is vsftpd. conf.

Vsftpd log File:/var/log/xferlog

Configure vsftp:

Modify vsftpd. conf to allow anonymous login.

Gedit/etc/vsftpd. conf

Anonymous_enable = YES # whether anonymous login is allowed

Anonymous ftp user: ftp, password: fpt

For example: ftp: 192.168.1.2 is actually ftp: // ftp: ftp@192.168.1.2

In addition, you need to authorize the log directory chmod 777/var/log

This problem is so important that it has been suffering for even one day.

Configure vsftpd Local Users:

Local_enable = YES # allow local users to log on

Write_enable = YES # Write Permission

In addition, you need to enable vsftpd of selinux.

Getsebool ftpd_disable_trans

Setsebool-P ftpd_disable_trans 1

Configure the vsftpd virtual directory:

For example, use/home/bob/incoming as the ftp directory.

Mount-o bind/var/ftp/incoming/home/bob/incoming

2. Configure the proxy server using squid.

Failed to configure squid for the first time. Switch to apache that comes with redhat.

Apache configuration proxy is very simple. Modify/etc/httpd/conf/htpd. conf and enable ProxyRequests On. However, the apache proxy is too simple to manage. You have to enable squid again.

Installation: rpm-ivh squid. rpm

After installation, modify/etc/squid. conf.

The main parameters are:

Cache_dir ufs/var/squid

Cache_mem 32 MB

Cache_swap_low 90

Cache_swap_high 95

Another important parameter is visible_hostname.

(This is generally the local machine, for example, visible_hostname 192.168.1.5)

Start:/usr/sbin/squid-z or service squid start

Management: mainly refers to the management of proxy IP addresses.

Squid ACL rules

For example, only 192.168.1.168 can be connected to the Internet. The number of concurrent connections cannot exceed 10, and QQ cannot be used to download mp3 files.

Acl mmxfile url_regex-I. qq. .tencent.com # qq restrictions

Http_access deny mmxfile

Acl banned url_regex/. mp3 $ # Restrict mp3

Http_access deny banned

Acl conncount maxconn 10 # concurrency

Acl jarwang src 192.168.1.168/32

Http_access deny conncount jarwang

Http_access allow jarwang

Http_access deny all