ubuntu 16 VSFTP 架设

Posted 2020-10-29

[email protected]:~# sudo apt-get update
[email protected]:~# sudo apt-get install vsftpd
[email protected]:/home/myserver# service vsftpd restart
[email protected]:/etc# vi vsftpd.conf

listen=YES

Run standalone with IPv6?

Like the listen parameter, except vsftpd will listen on an IPv6 socket

instead of an IPv4 one. This parameter and the listen parameter are mutually

exclusive.

#listen_ipv6=YES
#

Allow anonymous FTP? (Beware - allowed by default if you comment this out).

anonymous_enable=NO
#

Uncomment this to allow local users to log in.

local_enable=YES
#

Uncomment this to enable any form of FTP write command.

write_enable=YES
#

Default umask for local users is 077. You may wish to change this to 022,

if your users expect that (022 is used by most other ftpd‘s)

local_umask=022

dirmessage_enable=YES

use_localtime=YES
#

Activate logging of uploads/downloads.

xferlog_enable=YES
#

Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES

access.

secure_chroot_dir=/var/run/vsftpd/empty
#

This string is the name of the PAM service vsftpd will use.

pam_service_name=ftp
#

This option specifies the location of the RSA certificate to use for SSL

encrypted connections.

rsa_cert_file=/etc/ssl/private/vsftpd.pem

2、配置
[email protected]:~#groupadd scan1
[email protected]:~#useradd -G scan1 -d /home/scan1 -M ftpscan
[email protected]:~#useradd -G scan1 -d /home/scan1 -M ftpscan2
[email protected]:~#chown ftpscan:ftpscan /home/scan1/
[email protected]:~# chmod -R 755 /home/scan1/
[email protected]:~# fdisk -l
[email protected]:~# blkid /dev/sda5 查找到UUID
[email protected]:~# vi /etc/fstab
UUID=d71005bf-3bd2-46d6-a7be-3af47f76fad3 /home/scan1 ext4 defaults 0 2

3、530 Login incorrect错误的解决方法
1、vsftp 提示 530 Login incorrect错误的解决方法

只需要把/etc/pam.d/vsftpd文件中的

auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed

这一句注释掉就OK了。前面加一个#好

重启vsftpd服务。问题解决

4、双网卡配置

[email protected]:/etc# vim /etc/network/interfaces
auto lo
iface lo inet loopback
auto etho
iface lo inet loopback
auto eth1
iface lo inet loopback
up route add -net 192.168.0.0 netmask 255.255.0.0 gw 192.168.23.1
up route add -net 10.0.0.0 netmask 255.255.0.0 gw 10.0.16.1

[email protected]:~# route delete default
[email protected]:~# route add -net 192.168.0.0 netmask 255.255.0.0 dev eth0
[email protected]:~# route add -net 10.0.0.0 netmask 255.0.0.0 dev eth1
[email protected]:~# route add -net 192.168.0.0 netmask 255.255.0.0 gw 192.168.23.1

××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××
2017 12 TEST UBUNTU 16.0

[email protected]:~# sudo apt-get install vsftpd
[email protected]:/home/myserver# sudo service vsftpd restart
第二步：新建目录/home/scan1/作为用户主目录
sudo mkdir /home/scan1/

[email protected]:~#groupadd scan1
第三步：新建用户uftp，制定用户主目录和所用shell，并设置密码
[email protected]:/home# useradd -G scan1 -d /home/scan1/ -M mis -s /bin/bash
[email protected]:/home# passwd mis
輸入新的 UNIX 密碼：
再次輸入新的 UNIX 密碼：
passwd：密碼已成功地變更
[email protected]:~# useradd -G scan1 -d /home/scan1/ -M mis2 -s /bin/bash
[email protected]:~# passwd mis2
輸入新的 UNIX 密碼：
再次輸入新的 UNIX 密碼：
passwd：密碼已成功地變更
第四步：新建文件/etc/vsftpd.user_list，用于存放允许访问ftp的用户：
[email protected]:/home# vi /etc/vsftpd.user_list
mis
mis2
[email protected]:/home# vi /etc/vsftpd.conf

Run standalone? vsftpd can run either from an inetd or as a standalone

daemon started from an initscript.

listen=YES
#

Run standalone with IPv6?

Like the listen parameter, except vsftpd will listen on an IPv6 socket

instead of an IPv4 one. This parameter and the listen parameter are mutually

exclusive.

#listen_ipv6=YES
#

Allow anonymous FTP? (Disabled by default)

anonymous_enable=NO
#

Uncomment this to allow local users to log in.

local_enable=YES
#

Uncomment this to enable any form of FTP write command.

write_enable=YES
#

Default umask for local users is 077. You may wish to change this to 022,

if your users expect that (022 is used by most other ftpd‘s)

local_umask=022

Activate directory messages - messages given to remote users when they

go into a certain directory.

dirmessage_enable=YES
#

If enabled, vsftpd will display directory listings with the time

in your local time zone. The default is to display GMT. The

times returned by the MDTM FTP command are also affected by this

option.

use_localtime=YES
#

Activate logging of uploads/downloads.

xferlog_enable=YES
#

Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES
#

This option should be the name of a directory which is empty. Also, the

directory should not be writable by the ftp user. This directory is used

as a secure chroot() jail at times vsftpd does not require filesystem

access.

secure_chroot_dir=/var/run/vsftpd/empty
#

This string is the name of the PAM service vsftpd will use.

pam_service_name=vsftpd
userlist_file=/etc/vsftpd.user_list
#userlist_enable=YES
#userlist_deny=NO 可直接跳出登入用戶畫面
#

This option specifies the location of the RSA certificate to use for SSL

encrypted connections.

rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem

This option specifies the location of the RSA key to use for SSL

encrypted connections.

rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
[email protected]:~# chmod -R 755 /home/scan1/
[email protected]:~# chown -R mis:scan1 /home/scan1/
[email protected]:~# sudo service vsftpd restart

注： mis用戶有讀寫權限，mis2、dsc用戶有讀權限。

方法2：
[email protected]:/home/scan1# chmod -R u=x,g=rwx /home/scan1/
[email protected]:/home/scan1# ls -al
注： mis用戶有讀權限，mis2、dsc用戶有寫讀權限。

[email protected]:/home# sudo service vsftpd stop