linux上搭建ftp
重要 解决如何搭建ftp
解决用户指定访问其根目录
解决访问ftp超时连接
解决ftp主动连接、被动连接的问题
1、安装ftp
安装ftp前,先把防火墙关闭
#service iptables stop (挺重要)
安装好后再根据需要的端口 添加到 iptables
- 直接用yum安装 vsftp
# .执行以下安装命令 yum install -y vsftpd # .设置开机启动服务 chkconfig vsftpd on # .启动服务 service vsftpd start
- 配置 ftp 配置文件
这里只是简单的介绍几个必须的配置,具体用到的配置自己去配
#默认的配置文件是/etc/vsftpd/vsftpd.conf # Example config file /etc/vsftpd/vsftpd.conf
# # The default compiled in settings are fairly paranoid. This sample file # loosens things up a bit, to make the ftp daemon more usable. # Please see vsftpd.conf.5 for all compiled in defaults. # # READ THIS: This example file is NOT an exhaustive list of vsftpd options. # Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's # capabilities. # # Allow anonymous FTP? (Beware - allowed by default if you comment this out). anonymous_enable=NO #是否允许匿名登录 # # Uncomment this to allow local users to log in. # When SELinux is enforcing check for SE bool ftp_home_dir local_enable=YES # # Uncomment this to enable any form of FTP write command. write_enable=YES # # Default umask for local users is 077. You may wish to change this to 022, # if your users expect that (022 is used by most other ftpd's) local_umask=022 # # Uncomment this to allow the anonymous FTP user to upload files. This only # has an effect if the above global write enable is activated. Also, you will # obviously need to create a directory writable by the FTP user. # When SELinux is enforcing check for SE bool allow_ftpd_anon_write, allow_ftpd_full_access #anon_upload_enable=YES # # Uncomment this if you want the anonymous FTP user to be able to create # new directories. #anon_mkdir_write_enable=YES # # Activate directory messages - messages given to remote users when they # go into a certain directory. dirmessage_enable=YES # # Activate logging of uploads/downloads. xferlog_enable=YES #PASV_enable=NO # # Make sure PORT transfer connections originate from port 20 (ftp-data). #主动登录 connect_from_port_20=YES #是否允许主动登录、数据传输端口为20(防火墙必须开放端口20) 【解决访问ftp超时连接】 pasv_enable=NO #是否被动登录,关闭被动登录 【解决ftp主动连接、被动连接的问题】
47 #被动登录 #开启被动则把上面的 注释,添加下面几个
xferlog_std_format=YES listen=NO local_root=/mnt/ftp #配置 用户的目录
- 添加用户
增加用户user001,指向目录/mnt/ftp,禁止登录SSH权限。
#添加用户,并配置根目录为 /mnt/ftp 即是 用户访问目录 useradd -d /mnt/ftp -s /sbin/nologin user001 #添加密码 passwd user001
# 并且修改 /mnt/ftp 目录的权限
chmod -R 755 /mnt/ftp
#改变文件拥有者和群组 (看文件的拥有着,不是user001就需要)
chown user00l:user001 /mnt/ftp
- 编辑/etc/vsftpd/chroot_list目录,把用户名添加上去即可
vi /etc/vsftpd/chroot_list
#添加 user001即可
user001
到目前为至,已经完成了,重启服务就可以登录测试了
#service vsftpd restart