Centos6.9安装vsftpd并配置多用户的方法
<p>本文介绍了Centos6.9安装vsftpd并配置多用户的方法，分享给大家，具体如下：</p>
<p>
<strong>一、安装vsftpd</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_334684">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments">#安装vsftpd</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">yum -y </code><code class="bash functions">install</code> <code class="bash plain">vsftpd</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash comments">#设置开机启动</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain">chkconfig vsftpd on</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash comments">#查看服务状态</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash plain">service vsftpd status</code>
</div>
<div class="line number7 index6 alt2">
<code class="bash comments">#默认是关闭的，如下</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash comments"># vsftpd is stopped</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>二、修改系统保留FTP</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_876280">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
<div class="line number10 index9 alt1">
10</div>
<div class="line number11 index10 alt2">
11</div>
<div class="line number12 index11 alt1">
12</div>
<div class="line number13 index12 alt2">
13</div>
<div class="line number14 index13 alt1">
14</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments">#添加组</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">groupadd -g 1002 vsftpd</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash comments">#创建用户组目录</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash functions">mkdir</code> <code class="bash plain">-p </code><code class="bash plain">/home/vsftpd</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash comments">#添加用户</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash functions">useradd</code> <code class="bash plain">-c </code><code class="bash string">"FTP User"</code> <code class="bash plain">-d </code><code class="bash plain">/home/vsftpd/vsftpd</code> <code class="bash plain">-g vsftpd -s </code><code class="bash plain">/sbin/nologin</code> <code class="bash plain">-u 1002 vsftpd</code>
</div>
<div class="line number7 index6 alt2">
<code class="bash functions">useradd</code> <code class="bash plain">-c </code><code class="bash string">"FTP User"</code> <code class="bash plain">-d </code><code class="bash plain">/home/vsftpd/test</code> <code class="bash plain">-g vsftpd -s </code><code class="bash plain">/sbin/nologin</code> <code class="bash functions">test</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash comments">#设置密码(格式：passswd 用户名)，输入密码回车，再次输入密码回车</code>
</div>
<div class="line number9 index8 alt2">
<code class="bash functions">passwd</code> <code class="bash plain">vsftpd</code>
</div>
<div class="line number10 index9 alt1">
<code class="bash comments">#创建指定访问目录</code>
</div>
<div class="line number11 index10 alt2">
<code class="bash functions">mkdir</code> <code class="bash plain">-p </code><code class="bash plain">/data/vsftpd</code>
</div>
<div class="line number12 index11 alt1">
<code class="bash comments">#更改权限</code>
</div>
<div class="line number13 index12 alt2">
<code class="bash functions">chown</code> <code class="bash plain">vsftpd:vsftpd </code><code class="bash plain">/data/vsftpd</code>
</div>
<div class="line number14 index13 alt1">
<code class="bash functions">chmod</code> <code class="bash plain">-R 775 </code><code class="bash plain">/data/vsftpd</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
可以查看添加进来的新用户</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_460621">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">cat</code> <code class="bash plain">/etc/passwd</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash comments">#如下</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash comments"># vsftpd:x:1002:1002:FTP User:/home/vsftpd/vsftpd:/sbin/nologin</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash comments"># test:x:1003:1002:FTP User:/home/vsftpd/test:/sbin/nologin</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
说下/bin/false跟/sbin/nologin的区别</p>
<p>
1、/bin/false什么也不做只是返回一个错误状态,然后立即退出。将用户的shell设置为/bin/false,用户会无法登录,并且不会有任何提示。</p>
<p>
2、/sbin/nologin会礼貌的向用户显示一条信息,并拒绝用户登录:This account is currently not available.</p>
<p>
3、有一些软件,比如一些ftp服务器软件,对于本地非虚拟账户,只有用户有有效的shell才能使用ftp服务。这时候就可以使用/sbin/nologin使用户即不能登录系统,还能使用一些系统服务,比如ftp服务。/bin/false则不行,这是二者的重要区别之一</p>
<p>
<strong>三、修改配置文件</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_622586">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments">#备份原文件</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash functions">mv</code> <code class="bash plain">/etc/vsftpd/vsftpd</code><code class="bash plain">.conf </code><code class="bash plain">/etc/vsftpd/vsftpd</code><code class="bash plain">.conf.txt</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash comments">#生成新的配置文件</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash functions">touch</code> <code class="bash plain">/etc/vsftpd/vsftpd</code><code class="bash plain">.conf</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash comments">#编辑配置文件</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash plain">vim </code><code class="bash plain">/etc/vsftpd/vsftpd</code><code class="bash plain">.conf</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
粘贴下面这些配置进去</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterplain" id="highlighter_961606">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
<div class="line number10 index9 alt1">
10</div>
<div class="line number11 index10 alt2">
11</div>
<div class="line number12 index11 alt1">
12</div>
<div class="line number13 index12 alt2">
13</div>
<div class="line number14 index13 alt1">
14</div>
<div class="line number15 index14 alt2">
15</div>
<div class="line number16 index15 alt1">
16</div>
<div class="line number17 index16 alt2">
17</div>
<div class="line number18 index17 alt1">
18</div>
<div class="line number19 index18 alt2">
19</div>
<div class="line number20 index19 alt1">
20</div>
<div class="line number21 index20 alt2">
21</div>
<div class="line number22 index21 alt1">
22</div>
<div class="line number23 index22 alt2">
23</div>
<div class="line number24 index23 alt1">
24</div>
<div class="line number25 index24 alt2">
25</div>
<div class="line number26 index25 alt1">
26</div>
<div class="line number27 index26 alt2">
27</div>
<div class="line number28 index27 alt1">
28</div>
<div class="line number29 index28 alt2">
29</div>
<div class="line number30 index29 alt1">
30</div>
<div class="line number31 index30 alt2">
31</div>
<div class="line number32 index31 alt1">
32</div>
<div class="line number33 index32 alt2">
33</div>
<div class="line number34 index33 alt1">
34</div>
<div class="line number35 index34 alt2">
35</div>
<div class="line number36 index35 alt1">
36</div>
<div class="line number37 index36 alt2">
37</div>
<div class="line number38 index37 alt1">
38</div>
<div class="line number39 index38 alt2">
39</div>
<div class="line number40 index39 alt1">
40</div>
<div class="line number41 index40 alt2">
41</div>
<div class="line number42 index41 alt1">
42</div>
<div class="line number43 index42 alt2">
43</div>
<div class="line number44 index43 alt1">
44</div>
<div class="line number45 index44 alt2">
45</div>
<div class="line number46 index45 alt1">
46</div>
<div class="line number47 index46 alt2">
47</div>
<div class="line number48 index47 alt1">
48</div>
<div class="line number49 index48 alt2">
49</div>
<div class="line number50 index49 alt1">
50</div>
<div class="line number51 index50 alt2">
51</div>
<div class="line number52 index51 alt1">
52</div>
<div class="line number53 index52 alt2">
53</div>
<div class="line number54 index53 alt1">
54</div>
<div class="line number55 index54 alt2">
55</div>
<div class="line number56 index55 alt1">
56</div>
<div class="line number57 index56 alt2">
57</div>
<div class="line number58 index57 alt1">
58</div>
<div class="line number59 index58 alt2">
59</div>
<div class="line number60 index59 alt1">
60</div>
<div class="line number61 index60 alt2">
61</div>
<div class="line number62 index61 alt1">
62</div>
<div class="line number63 index62 alt2">
63</div>
<div class="line number64 index63 alt1">
64</div>
<div class="line number65 index64 alt2">
65</div>
<div class="line number66 index65 alt1">
66</div>
<div class="line number67 index66 alt2">
67</div>
<div class="line number68 index67 alt1">
68</div>
<div class="line number69 index68 alt2">
69</div>
<div class="line number70 index69 alt1">
70</div>
<div class="line number71 index70 alt2">
71</div>
<div class="line number72 index71 alt1">
72</div>
<div class="line number73 index72 alt2">
73</div>
<div class="line number74 index73 alt1">
74</div>
<div class="line number75 index74 alt2">
75</div>
<div class="line number76 index75 alt1">
76</div>
<div class="line number77 index76 alt2">
77</div>
<div class="line number78 index77 alt1">
78</div>
<div class="line number79 index78 alt2">
79</div>
<div class="line number80 index79 alt1">
80</div>
<div class="line number81 index80 alt2">
81</div>
<div class="line number82 index81 alt1">
82</div>
<div class="line number83 index82 alt2">
83</div>
<div class="line number84 index83 alt1">
84</div>
<div class="line number85 index84 alt2">
85</div>
<div class="line number86 index85 alt1">
86</div>
<div class="line number87 index86 alt2">
87</div>
<div class="line number88 index87 alt1">
88</div>
<div class="line number89 index88 alt2">
89</div>
<div class="line number90 index89 alt1">
90</div>
<div class="line number91 index90 alt2">
91</div>
<div class="line number92 index91 alt1">
92</div>
<div class="line number93 index92 alt2">
93</div>
<div class="line number94 index93 alt1">
94</div>
<div class="line number95 index94 alt2">
95</div>
<div class="line number96 index95 alt1">
96</div>
<div class="line number97 index96 alt2">
97</div>
<div class="line number98 index97 alt1">
98</div>
<div class="line number99 index98 alt2">
99</div>
<div class="line number100 index99 alt1">
100</div>
<div class="line number101 index100 alt2">
101</div>
<div class="line number102 index101 alt1">
102</div>
<div class="line number103 index102 alt2">
103</div>
<div class="line number104 index103 alt1">
104</div>
<div class="line number105 index104 alt2">
105</div>
<div class="line number106 index105 alt1">
106</div>
<div class="line number107 index106 alt2">
107</div>
<div class="line number108 index107 alt1">
108</div>
<div class="line number109 index108 alt2">
109</div>
<div class="line number110 index109 alt1">
110</div>
<div class="line number111 index110 alt2">
111</div>
<div class="line number112 index111 alt1">
112</div>
<div class="line number113 index112 alt2">
113</div>
<div class="line number114 index113 alt1">
114</div>
<div class="line number115 index114 alt2">
115</div>
<div class="line number116 index115 alt1">
116</div>
<div class="line number117 index116 alt2">
117</div>
<div class="line number118 index117 alt1">
118</div>
<div class="line number119 index118 alt2">
119</div>
<div class="line number120 index119 alt1">
120</div>
<div class="line number121 index120 alt2">
121</div>
<div class="line number122 index121 alt1">
122</div>
<div class="line number123 index122 alt2">
123</div>
<div class="line number124 index123 alt1">
124</div>
<div class="line number125 index124 alt2">
125</div>
<div class="line number126 index125 alt1">
126</div>
<div class="line number127 index126 alt2">
127</div>
<div class="line number128 index127 alt1">
128</div>
<div class="line number129 index128 alt2">
129</div>
<div class="line number130 index129 alt1">
130</div>
<div class="line number131 index130 alt2">
131</div>
<div class="line number132 index131 alt1">
132</div>
<div class="line number133 index132 alt2">
133</div>
<div class="line number134 index133 alt1">
134</div>
<div class="line number135 index134 alt2">
135</div>
<div class="line number136 index135 alt1">
136</div>
<div class="line number137 index136 alt2">
137</div>
<div class="line number138 index137 alt1">
138</div>
<div class="line number139 index138 alt2">
139</div>
<div class="line number140 index139 alt1">
140</div>
<div class="line number141 index140 alt2">
141</div>
<div class="line number142 index141 alt1">
142</div>
<div class="line number143 index142 alt2">
143</div>
<div class="line number144 index143 alt1">
144</div>
<div class="line number145 index144 alt2">
145</div>
<div class="line number146 index145 alt1">
146</div>
<div class="line number147 index146 alt2">
147</div>
<div class="line number148 index147 alt1">
148</div>
<div class="line number149 index148 alt2">
149</div>
<div class="line number150 index149 alt1">
150</div>
<div class="line number151 index150 alt2">
151</div>
<div class="line number152 index151 alt1">
152</div>
<div class="line number153 index152 alt2">
153</div>
<div class="line number154 index153 alt1">
154</div>
<div class="line number155 index154 alt2">
155</div>
<div class="line number156 index155 alt1">
156</div>
<div class="line number157 index156 alt2">
157</div>
<div class="line number158 index157 alt1">
158</div>
<div class="line number159 index158 alt2">
159</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="plain plain"># Example config file /etc/vsftpd/vsftpd.conf</code>
</div>
<div class="line number2 index1 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number3 index2 alt2">
<code class="plain plain"># 如果vsftpd处于独立模式，则这是它将侦听传入FTP连接的端口。</code>
</div>
<div class="line number4 index3 alt1">
<code class="plain plain">listen_port=21</code>
</div>
<div class="line number5 index4 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number6 index5 alt1">
<code class="plain plain"># 登入目录</code>
</div>
<div class="line number7 index6 alt2">
<code class="plain plain">local_root=/data/vsftpd</code>
</div>
<div class="line number8 index7 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number9 index8 alt2">
<code class="plain plain"># 是否允许匿名用户登录</code>
</div>
<div class="line number10 index9 alt1">
<code class="plain plain">anonymous_enable=NO</code>
</div>
<div class="line number11 index10 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number12 index11 alt1">
<code class="plain plain"># 设定本地用户可以访问。注：如使用虚拟宿主用户，在该项目设定为NO的情况下所有虚拟用户将无法访问</code>
</div>
<div class="line number13 index12 alt2">
<code class="plain plain">local_enable=YES</code>
</div>
<div class="line number14 index13 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number15 index14 alt2">
<code class="plain plain"># 设定允许进行写操作(上传、删除)，默认为YES</code>
</div>
<div class="line number16 index15 alt1">
<code class="plain plain">write_enable=YES</code>
</div>
<div class="line number17 index16 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number18 index17 alt1">
<code class="plain plain"># 是否使用本地时间</code>
</div>
<div class="line number19 index18 alt2">
<code class="plain plain">#use_localtime=YES</code>
</div>
<div class="line number20 index19 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number21 index20 alt2">
<code class="plain plain"># 此参数在VSFTPD使用单独(standalone)模式下有效。此参数定义了FTP服务器最大的并发连接数，当超过此连接数时，服务器拒绝客户端连接。默认值：0（无限制）。</code>
</div>
<div class="line number22 index21 alt1">
<code class="plain plain">#max_clients=5</code>
</div>
<div class="line number23 index22 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number24 index23 alt1">
<code class="plain plain"># 此参数在VSFTPD使用单独(standalone)模式下有效。此参数定义每个IP地址最大的并发连接数目。超过这个数目将会拒绝连接。此选项的设置将影响到象网际快车这类的多进程下载软件。默认值为0，表示不限制。</code>
</div>
<div class="line number25 index24 alt2">
<code class="plain plain">#max_per_ip=3</code>
</div>
<div class="line number26 index25 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number27 index26 alt2">
<code class="plain plain"># 掩饰码</code>
</div>
<div class="line number28 index27 alt1">
<code class="plain plain">local_umask=002</code>
</div>
<div class="line number29 index28 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number30 index29 alt1">
<code class="plain plain"># 是否允许匿名FTP用户上传文件。</code>
</div>
<div class="line number31 index30 alt2">
<code class="plain plain">#anon_upload_enable=NO</code>
</div>
<div class="line number32 index31 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number33 index32 alt2">
<code class="plain plain"># 是否允许匿名FTP用户能够创建新目录</code>
</div>
<div class="line number34 index33 alt1">
<code class="plain plain">#anon_mkdir_write_enable=NO</code>
</div>
<div class="line number35 index34 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number36 index35 alt1">
<code class="plain plain"># 激活目录消息 - 当远程用户进入某个目录时发送的消息。</code>
</div>
<div class="line number37 index36 alt2">
<code class="plain plain">dirmessage_enable=YES</code>
</div>
<div class="line number38 index37 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number39 index38 alt2">
<code class="plain plain"># 设置为yes时，用户上传和下载文件都会被记录下来，记录文件位置与xferlog_file=/var/log/vsftpd/xferlog</code>
</div>
<div class="line number40 index39 alt1">
<code class="plain plain">xferlog_enable=YES</code>
</div>
<div class="line number41 index40 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number42 index41 alt1">
<code class="plain plain"># 在vsftpd_log_file和xferlog_file文件之间切换登录文件信息，NO 写入 vsftpd_log_file, YES 写入 xferlog_file</code>
</div>
<div class="line number43 index42 alt2">
<code class="plain plain">xferlog_std_format=YES</code>
</div>
<div class="line number44 index43 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number45 index44 alt2">
<code class="plain plain"># 设置另外一个vsftpd的日记文件，也可以不设置</code>
</div>
<div class="line number46 index45 alt1">
<code class="plain plain">dual_log_enable=YES</code>
</div>
<div class="line number47 index46 alt2">
<code class="plain plain">xferlog_file=/var/log/vsftpd/xferlog</code>
</div>
<div class="line number48 index47 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number49 index48 alt2">
<code class="plain plain"># 设置日志目录</code>
</div>
<div class="line number50 index49 alt1">
<code class="plain plain">vsftpd_log_file=/var/log/vsftpd/vsftpd.log</code>
</div>
<div class="line number51 index50 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number52 index51 alt1">
<code class="plain plain"># 端口样式连接始发的端口（只要名称不正确的 connect_from_port_20 启用），默认值：20</code>
</div>
<div class="line number53 index52 alt2">
<code class="plain plain">connect_from_port_20=YES</code>
</div>
<div class="line number54 index53 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number55 index54 alt2">
<code class="plain plain"># 是否修改匿名用户所上传文件的所有权。YES，匿名用户所上传的文件的所有权将改为另外一个不同的用户所有，用户由chown_username参数指定。此选项默认值为NO。 </code>
</div>
<div class="line number56 index55 alt1">
<code class="plain plain">#chown_uploads=YES</code>
</div>
<div class="line number57 index56 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number58 index57 alt1">
<code class="plain plain"># 指定拥有匿名用户上传文件所有权的用户</code>
</div>
<div class="line number59 index58 alt2">
<code class="plain plain">#chown_username=whoever</code>
</div>
<div class="line number60 index59 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number61 index60 alt2">
<code class="plain plain"># 远程客户端建立与PASV样式数据连接的连接的超时（以秒为单位）,默认值：60。</code>
</div>
<div class="line number62 index61 alt1">
<code class="plain plain">#accept_timeout=60</code>
</div>
<div class="line number63 index62 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number64 index63 alt1">
<code class="plain plain"># 远程客户端响应我们的端口样式数据连接的超时时间（秒）。默认值：60。</code>
</div>
<div class="line number65 index64 alt2">
<code class="plain plain">#connect_timeout=60</code>
</div>
<div class="line number66 index65 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number67 index66 alt2">
<code class="plain plain"># 远程客户端可能在FTP命令之间花费的最长时间（以秒为单位）。如果超时触发，远程客户端将被启动。默认值：300</code>
</div>
<div class="line number68 index67 alt1">
<code class="plain plain">#idle_session_timeout=300</code>
</div>
<div class="line number69 index68 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number70 index69 alt1">
<code class="plain plain"># 超时时间（以秒为单位），大概是允许数据传输停止而无进度的最大时间。如果超时触发，远程客户端将被启动。默认值：300</code>
</div>
<div class="line number71 index70 alt2">
<code class="plain plain">#data_connection_timeout=300</code>
</div>
<div class="line number72 index71 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number73 index72 alt2">
<code class="plain plain"># 创建上传文件的权限。Umasks应用于此值的顶部。如果要上传的文件可执行，您可能希望更改为0777。默认值：0666</code>
</div>
<div class="line number74 index73 alt1">
<code class="plain plain">#file_open_mode=002</code>
</div>
<div class="line number75 index74 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number76 index75 alt1">
<code class="plain plain"># 本地认证用户允许的最大数据传输速率（以字节为单位）。默认值：0（无限制）</code>
</div>
<div class="line number77 index76 alt2">
<code class="plain plain">#local_max_rate=0</code>
</div>
<div class="line number78 index77 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number79 index78 alt2">
<code class="plain plain"># 建议您在系统上定义一个唯一的用户，ftp服务器可以用作完全独立且无特权的用户。</code>
</div>
<div class="line number80 index79 alt1">
<code class="plain plain">#nopriv_user=ftpsecure</code>
</div>
<div class="line number81 index80 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number82 index81 alt1">
<code class="plain plain"># 是否启动异步传输功能</code>
</div>
<div class="line number83 index82 alt2">
<code class="plain plain">#async_abor_enable=YES</code>
</div>
<div class="line number84 index83 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number85 index84 alt2">
<code class="plain plain"># 是否启用ASCII功能</code>
</div>
<div class="line number86 index85 alt1">
<code class="plain plain">ascii_upload_enable=YES</code>
</div>
<div class="line number87 index86 alt2">
<code class="plain plain">ascii_download_enable=YES</code>
</div>
<div class="line number88 index87 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number89 index88 alt2">
<code class="plain plain"># 自定义登录显示的字符串</code>
</div>
<div class="line number90 index89 alt1">
<code class="plain plain">#ftpd_banner=Welcome to blah FTP service.</code>
</div>
<div class="line number91 index90 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number92 index91 alt1">
<code class="plain plain"># 指定某个纯文本作为用户登录时显示的欢迎字眼，也可以放置一些让用户知道本FTP服务器的目录架构</code>
</div>
<div class="line number93 index92 alt2">
<code class="plain plain">#banner_file=/etc/vsftpd/welcome.txt</code>
</div>
<div class="line number94 index93 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number95 index94 alt2">
<code class="plain plain"># 您可以指定一个不允许的匿名电子邮件地址的文件。 显然有助于打击某些DoS攻击。</code>
</div>
<div class="line number96 index95 alt1">
<code class="plain plain">#deny_email_enable=YES</code>
</div>
<div class="line number97 index96 alt2">
<code class="plain plain"># (default follows)</code>
</div>
<div class="line number98 index97 alt1">
<code class="plain plain">#banned_email_file=/etc/vsftpd/banned_emails</code>
</div>
<div class="line number99 index98 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number100 index99 alt1">
<code class="plain plain"># 锁定某些用户在自家目录中。即当这些用户登录后，不可以转到系统的其他目录，只能在自家目录(及其子目录)下。</code>
</div>
<div class="line number101 index100 alt2">
<code class="plain plain"># 当chroot_local_user=YES，chroot_list_enable=YES时，chroot_list_file目录里面的用户不被chroot在主目录中。</code>
</div>
<div class="line number102 index101 alt1">
<code class="plain plain"># 当chroot_local_user=YES，chroot_list_enable=NO时，chroot_list_file目录里面的用户全部给被chroot在主目录中</code>
</div>
<div class="line number103 index102 alt2">
<code class="plain plain">chroot_local_user=YES</code>
</div>
<div class="line number104 index103 alt1">
<code class="plain plain">chroot_list_enable=YES</code>
</div>
<div class="line number105 index104 alt2">
<code class="plain plain"># (default follows)</code>
</div>
<div class="line number106 index105 alt1">
<code class="plain plain">chroot_list_file=/etc/vsftpd/chroot_list</code>
</div>
<div class="line number107 index106 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number108 index107 alt1">
<code class="plain plain"># 此选项默认值为NO , 此时ftpusers 文件中的用户禁止登录FTP 服务器；若此项设为YES ，则 user_list 文件中的用户允许登录 FTP 服务器，而如果同时设置了 userlist_deny=YES ，则 user_list 文件中的用户将不允许登录FTP 服务器，甚至连输入密码提示信息都没有，直接被FTP服务器拒绝</code>
</div>
<div class="line number109 index108 alt2">
<code class="plain plain">userlist_enable=YES</code>
</div>
<div class="line number110 index109 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number111 index110 alt2">
<code class="plain plain"># 此项默认为YES ，设置是否阻扯user_list 文件中的用户登录FTP 服务器,设置为NO时只允许user_list 当中的用户使用ftp,对于后新建的用户起到屏蔽作用，如果想要使用ftp则必须加入这个列表文件中</code>
</div>
<div class="line number112 index111 alt1">
<code class="plain plain">userlist_deny=NO</code>
</div>
<div class="line number113 index112 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number114 index113 alt1">
<code class="plain plain"># 当userlist_enable=YES，当userlist_deny=YES，这里面的用户不能登录，当userlist_deny=NO时，只有这里面的用户才能登录ftp 。</code>
</div>
<div class="line number115 index114 alt2">
<code class="plain plain">userlist_file=/etc/vsftpd/user_list</code>
</div>
<div class="line number116 index115 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number117 index116 alt2">
<code class="plain plain"># 当启用“listen”指令时，vsftpd以独立模式运行，并在IPv4套接字上侦听。 该指令不能与listen_ipv6指令一起使用。</code>
</div>
<div class="line number118 index117 alt1">
<code class="plain plain">listen=YES</code>
</div>
<div class="line number119 index118 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number120 index119 alt1">
<code class="plain plain"># 此指令允许侦听IPv6套接字。 要监听IPv4和IPv6套接字，您必须运行两个vsftpd副本和两个配置文件。请确保其中一个listen选项被注释！</code>
</div>
<div class="line number121 index120 alt2">
<code class="plain plain">#listen_ipv6=YES</code>
</div>
<div class="line number122 index121 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number123 index122 alt2">
<code class="plain plain"># 设置 PAM 外挂模块提供的认证服务所使用的配置文件名 ，即/etc/pam.d/vsftpd 文件</code>
</div>
<div class="line number124 index123 alt1">
<code class="plain plain">pam_service_name=vsftpd</code>
</div>
<div class="line number125 index124 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number126 index125 alt1">
<code class="plain plain"># 是否开启用虚拟用户功能</code>
</div>
<div class="line number127 index126 alt2">
<code class="plain plain">#guest_enable=YES</code>
</div>
<div class="line number128 index127 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number129 index128 alt2">
<code class="plain plain"># 指定虚拟用户的宿主用户，CentOS中已经有内置的ftp用户了</code>
</div>
<div class="line number130 index129 alt1">
<code class="plain plain">#guest_username=ftp</code>
</div>
<div class="line number131 index130 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number132 index131 alt1">
<code class="plain plain"># 匿名客户端允许的最大数据传输速率（以字节为单位）。默认值：0（无限制）</code>
</div>
<div class="line number133 index132 alt2">
<code class="plain plain">#anon_max_rate=0</code>
</div>
<div class="line number134 index133 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number135 index134 alt2">
<code class="plain plain"># 为匿名用户设置文件创建的umask的值。注意！如果要指定八进制值，请记住“0”前缀，否则该值将被视为基数10整数！默认值：077</code>
</div>
<div class="line number136 index135 alt1">
<code class="plain plain">#anon_umask=002</code>
</div>
<div class="line number137 index136 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number138 index137 alt1">
<code class="plain plain"># 设定虚拟用户个人vsftp的CentOS FTP服务文件存放路径。存放虚拟用户个性的CentOS FTP服务文件(配置文件名=虚拟用户名)</code>
</div>
<div class="line number139 index138 alt2">
<code class="plain plain">#user_config_dir=/etc/vsftpd/virtual_conf</code>
</div>
<div class="line number140 index139 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number141 index140 alt2">
<code class="plain plain"># 如果要禁止PASV方法获取数据连接，请设置为NO。</code>
</div>
<div class="line number142 index141 alt1">
<code class="plain plain">pasv_enable=YES</code>
</div>
<div class="line number143 index142 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number144 index143 alt1">
<code class="plain plain"># 设定在PASV模式下，建立数据传输所可以使用port范围的下界和上界，0 表示任意。默认值为0。把端口范围设在比较高的一段范围内</code>
</div>
<div class="line number145 index144 alt2">
<code class="plain plain">pasv_min_port=20000</code>
</div>
<div class="line number146 index145 alt1">
<code class="plain plain">pasv_max_port=30000</code>
</div>
<div class="line number147 index146 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number148 index147 alt1">
<code class="plain plain"># 默认值为NO。为YES时，将关闭PASV模式的安全检查。该检查确保数据连接和控制连接是来自同一个IP地址。小心打开此选项。此选项唯一合理的用法是存在于由安全隧道方案构成的组织中。</code>
</div>
<div class="line number149 index148 alt2">
<code class="plain plain">#pasv_promiscuous=YES</code>
</div>
<div class="line number150 index149 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number151 index150 alt2">
<code class="plain plain"># 如果您不想使用PORT方法获取数据连接，则设置为NO。</code>
</div>
<div class="line number152 index151 alt1">
<code class="plain plain">#port_enable=YES</code>
</div>
<div class="line number153 index152 alt2">
<code class="plain plain">#</code>
</div>
<div class="line number154 index153 alt1">
<code class="plain plain"># 默认值为NO。如果要禁用PORT安全检查，确保传出数据连接只能连接到客户端，请设置为YES。</code>
</div>
<div class="line number155 index154 alt2">
<code class="plain plain">#port_promiscuous=YES</code>
</div>
<div class="line number156 index155 alt1">
<code class="plain plain">#</code>
</div>
<div class="line number157 index156 alt2">
<code class="plain plain"># 表明服务器使用 tcp_wrappers 作为主机访问控制方式，tcp_wrappers 可以实现linux 系统中网络服务的基于主机地址的访问控制，在/etc 目录中的hosts.allow 和hosts.deny 两个文件用于设置tcp_wrappers 的访问控制，前者设置允许访问记录，后者设置拒绝访问记录。例如想限制某些主机对FTP 服务器12.36.126.141 的匿名访问，编缉/etc/hosts.allow 文件，如在下面增加两行命令：vsftpd:192.168.2.1:DENY 和vsftpd:192.168.2.20:DENY 表明限制IP 为192.168.2.1/192.168.2.20 主机访问IP 为12.36.126.141 的FTP 服务器，此时FTP 服务器虽可以PING 通，但无法连接</code>
</div>
<div class="line number158 index157 alt1">
<code class="plain plain">tcp_wrappers=YES</code>
</div>
<div class="line number159 index158 alt2">
<code class="plain plain">#</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>四、设置FTP用户信息</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterplain" id="highlighter_181790">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
<div class="line number10 index9 alt1">
10</div>
<div class="line number11 index10 alt2">
11</div>
<div class="line number12 index11 alt1">
12</div>
<div class="line number13 index12 alt2">
13</div>
<div class="line number14 index13 alt1">
14</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="plain plain">#建立限制用户访问目录的空文件</code>
</div>
<div class="line number2 index1 alt1">
<code class="plain plain">touch /etc/vsftpd/chroot_list</code>
</div>
<div class="line number3 index2 alt2">
</div>
<div class="line number4 index3 alt1">
<code class="plain plain">#添加ftp用户进来</code>
</div>
<div class="line number5 index4 alt2">
<code class="plain plain">vim /etc/vsftpd/user_list</code>
</div>
<div class="line number6 index5 alt1">
</div>
<div class="line number7 index6 alt2">
<code class="plain plain">#注释掉上面的用户，在后面加上</code>
</div>
<div class="line number8 index7 alt1">
<code class="plain plain">vsftpd</code>
</div>
<div class="line number9 index8 alt2">
<code class="plain plain">test</code>
</div>
<div class="line number10 index9 alt1">
</div>
<div class="line number11 index10 alt2">
<code class="plain plain">#创建日志文件</code>
</div>
<div class="line number12 index11 alt1">
<code class="plain plain">mkdir -p /var/log/vsftpd</code>
</div>
<div class="line number13 index12 alt2">
<code class="plain plain">touch /var/log/vsftpd/xferlog</code>
</div>
<div class="line number14 index13 alt1">
<code class="plain plain">touch /var/log/vsftpd/vsftpd.log</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>五、开启防火墙20000到30000端口</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_81640">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
<div class="line number10 index9 alt1">
10</div>
<div class="line number11 index10 alt2">
11</div>
<div class="line number12 index11 alt1">
12</div>
<div class="line number13 index12 alt2">
13</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments"># 查看防火墙是否有端口,有就退出编辑，没有就执行下句</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">vim </code><code class="bash plain">/etc/sysconfig/iptables</code>
</div>
<div class="line number3 index2 alt2">
</div>
<div class="line number4 index3 alt1">
<code class="bash comments">#添加端口</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 20000:30000 -j ACCEPT</code>
</div>
<div class="line number6 index5 alt1">
</div>
<div class="line number7 index6 alt2">
<code class="bash comments">#保存</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash plain">/etc/init</code><code class="bash plain">.d</code><code class="bash plain">/iptables</code> <code class="bash plain">save</code>
</div>
<div class="line number9 index8 alt2">
</div>
<div class="line number10 index9 alt1">
<code class="bash comments">#另外需要注意，如果是阿里云的，还需要登录阿里云在安全组里面添加入方向规则</code>
</div>
<div class="line number11 index10 alt2">
</div>
<div class="line number12 index11 alt1">
<code class="bash comments">#重启iptables 服务</code>
</div>
<div class="line number13 index12 alt2">
<code class="bash plain">service iptables restart</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>六、重启vsftpd服务</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_805877">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
<div class="line number10 index9 alt1">
10</div>
<div class="line number11 index10 alt2">
11</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments">#停止vsftpd 服务</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">service vsftpd stop</code>
</div>
<div class="line number3 index2 alt2">
</div>
<div class="line number4 index3 alt1">
<code class="bash comments">#启动vsftpd 服务</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">service vsftpd start</code>
</div>
<div class="line number6 index5 alt1">
</div>
<div class="line number7 index6 alt2">
<code class="bash comments">#重启vsftpd 服务</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash plain">service vsftpd restart</code>
</div>
<div class="line number9 index8 alt2">
<code class="bash plain">可以查看</code><code class="bash functions">ftp</code><code class="bash plain">端口是否已经给占用，一般情况下是21端口</code>
</div>
<div class="line number10 index9 alt1">
</div>
<div class="line number11 index10 alt2">
<code class="bash functions">netstat</code> <code class="bash plain">-lnp|</code><code class="bash functions">grep</code> <code class="bash plain">21</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持服务器之家。</p>
<p>
原文链接：http://www.jianshu.com/p/7800351e3fa5?utm_source=tuicool&utm_medium=referral</p>
頁:
[1]