vsftpd @ 西西部落格@痞客邦

About vsftpd

OS : Fedora 13 (2.6.36 CC改裝版)

1. 安裝: yum install vsftpd

2. Firewall Setting

setsebool -P ftp_home_dir=1

vi /etc/selinux/config

SELINUX=enforcing ==> SELINUX=disabled

3. /etc/rc.d/init.d/vsftpd start

4. Config vsftpd : vi /etc/vsftpd/vsftpd.conf

Name	variable	Description
anonymous_enable	YES/NO	是否允許匿名登入
local_enable	YES/NO	Allow local users to log in.
write_enable	YES/NO	Enable any form of FTP write command.
local_umask	022	上傳檔案，該檔案的預設權限。 Default umask for local users is 077. You may wish to change this to 022, if your users expect that (022 is used by most other ftpd's)
anon_upload_enable	YES/NO	是否允許匿名上傳檔案
anon_mkdir_write_enable	YES/NO	是否允許匿名mkdir
dirmessage_enable	YES/NO	進入目錄是否呈現訊息
xferlog_enable	YES/NO	Activate logging of uploads/downloads.
xferlog_file	file path	Log檔路徑，預設 /var/log/vsftpd.log
xferlog_std_format	YES/NO	If you want, you can have your log file in standard ftpd xferlog format.
connect_from_port_20	YES/NO	Make sure PORT transfer connections originate from port 20 (ftp-data).
chown_uploads	YES/NO	是否將匿名上傳的檔案指定給某個特定用戶。 If you want, you can arrange for uploaded anonymous files to be owned by a different user. Note! Using "root" for uploaded files is not # recommended!
chown_username	some_one	chown_uploads=YES才會生效。將匿名上傳檔案指定的用戶名稱。
idle_session_timeout	Integer	Timing out an idle session.
data_connection_timeout	Integer	Timing out a data connection.
nopriv_user	ftpsecure	It is recommended that you define on your system a unique user which the ftp server can use as a totally isolated and unprivileged user.
async_abor_enable	YES/NO
ascii_upload_enable	YES/NO
ascii_download_enable	YES/NO
ftpd_banner	String	Login banner string
deny_email_enable	YES/NO
banned_email_file	file path	/etc/vsftpd/banned_emails
chroot_local_user	YES/NO	You may specify an explicit list of local users to chroot() to their home directory. If chroot_local_user is YES, then this list becomes a list of users to NOT chroot().
chroot_list_enable	YES/NO
chroot_list_file	file path
ls_recurse_enable	YES/NO
listen	YES/NO
listen_ipv6	YES/NO
pam_service_name	string
userlist_enable	YES/NO
tcp_wrappers	YES/NO