ubuntu下利用proftpd搭建ftp服務(wù)器
ubuntu下如何利用proftpd構(gòu)架一個(gè)ftp服務(wù)器：proftpd（Professional FTP daemon）,是針對(duì)Wu-FTP的弱項(xiàng)而開發(fā)的。除了改進(jìn)其安全性，還有具備許多Wu-FTP所沒有的特點(diǎn)。比如，能以Stand-alone、xinetd模式運(yùn)行。ProFTP不僅配置方便，而且有MySQL模塊，本文主要講述的是ubuntu下利用proftpd搭建ftp服務(wù)器。
這篇文章針對(duì)那些希望利用ftp協(xié)議和朋友們共享文件的人們,就像windows下的FTPserU,我提供的方式不是唯一的,希望我的方法足夠清晰.這個(gè)FTPserver只允許擁有正確密碼的人使用,所以你要明白只有已知的用戶才能讀取你的FTP服務(wù).
1- 使用下面的命令安裝proftpd:
- Code:
- sudo apt-get install proftpd
2- 在etc/shells 加入如下代碼
- sudo gedit /etc/shells to open the file
譯注:命令行模式下sudo vi /etc/shells) :
- Code:
- /bin/false
新建一個(gè) /home/FTP-shared 目錄 :
- Code:
- cd /home
- sudo mkdir FTP-shared
創(chuàng)建一個(gè)只能用來讀取ftp的用戶userftp. 這個(gè)用戶不需要有效的shell(更安全) ,所以選擇 /bin/false shell 給 userftp , /home/FTP-shared 作為主目錄.
為了是這部分更清楚,我給取此操作的命令行:
- Code:
- sudo useradd userftp -p your_password -d /home/FTP-shared -s /bin/false
在FTP-shared 目錄下新建一個(gè)download和一個(gè)upload 目錄:
- Code:
- cd /home/FTP-shared/
- sudo mkdir download
- sudo mkdir upload
現(xiàn)在我們來給它們?cè)O(shè)置相應(yīng)的權(quán)限:
- Code:
- cd /home
- sudo chmod 755 FTP-shared
- cd FTP-shared
- sudo chmod 755 download
- sudo chmod 777 upload
3- proftpd的配置文件:
- Code:
- sudo gedit /etc/proftpd.conf
當(dāng)然你可以按你的需要編輯你自己的proftpd.conf:
Code:
- # To really apply changes reload proftpd after modifications.
- AllowOverwrite on
- AuthAliasOnly on
- # Choose here the user alias you want !!!!
- UserAlias sauron userftp
- ServerName "ChezFrodon"
- ServerType standalone
- DeferWelcome on
- MultilineRFC2228 on
- DefaultServer on
- ShowSymlinks off
- TimeoutNoTransfer 600
- TimeoutStalled 100
- TimeoutIdle 2200
- DisplayFirstChdir .message
- ListOptions "-l"
- RequireValidShell off
- TimeoutLogin 20
- RootLogin off
- # It's better for debug to create log files ;-)
- ExtendedLog /var/log/ftp.log
- TransferLog /var/log/xferlog
- SystemLog /var/log/syslog.log
- #DenyFilter \*.*/
- # I don't choose to use /etc/ftpusers file (set inside the users you want to ban, not useful for me)
- UseFtpUsers off
- # Allow to restart a download
- AllowStoreRestart on
- # Port 21 is the standard FTP port, so don't use it for security reasons (choose here the port you want)
- Port 1980
- # To prevent DoS attacks, set the maximum number of child processes
- # to 30. If you need to allow more than 30 concurrent connections
- # at once, simply increase this value. Note that this ONLY works
- # in standalone mode, in inetd mode you should use an inetd server
- # that allows you to limit maximum number of processes per service
- # (such as xinetd)
- MaxInstances 8
- # Set the user and group that the server normally runs at.
- User nobody
- Group nogroup
- # Umask 022 is a good standard umask to prevent new files and dirs
- # (second parm) from being group and world writable.
- Umask 022 022
- PersistentPasswd off
- MaxClients 8
- MaxClientsPerHost 8
- MaxClientsPerUser 8
- MaxHostsPerUser 8
- # Display a message after a successful login
- AccessGrantMsg "welcome !!!"
- # This message is displayed for each access good or not
- ServerIdent on "you're at home"
- # Set /home/FTP-shared directory as home directory
- DefaultRoot /home/FTP-shared
- # Lock all the users in home directory, ***** really important *****
- DefaultRoot ~
- MaxLoginAttempts 5
- #VALID LOGINS
- AllowUser userftp
- DenyALL
- Umask 022 022
- AllowOverwrite off
- DenyAll
- Umask 022 022
- AllowOverwrite off
- DenyAll
- /home/FTP-shared/upload/>
- Umask 022 022
- AllowOverwrite on
- DenyAll
- AllowAll
好了,你已經(jīng)完成了proftpd的配置,你的服務(wù)端口是1980,而讀取的參數(shù)如下,用戶:sauron,密碼:你為userftp設(shè)置的那個(gè).
4- 啟動(dòng)/停止/重啟動(dòng)你的服務(wù):
- Code:
- sudo /etc/init.d/proftpd start
- sudo /etc/init.d/proftpd stop
- sudo /etc/init.d/proftpd restart
對(duì)你的proftpd進(jìn)行一下語(yǔ)法檢查:
- Code:
- sudo proftpd -td5
想知道誰現(xiàn)在連接到你的服務(wù),用ftptop命令(使用字母"t"來轉(zhuǎn)換顯示頻率),你也可以使用"ftpwho"命令.
【編輯推薦】
