{"id":3153,"date":"2020-08-26T18:40:53","date_gmt":"2020-08-26T10:40:53","guid":{"rendered":"http:\/\/www.fatesky.com\/?p=3153"},"modified":"2024-03-19T21:58:10","modified_gmt":"2024-03-19T13:58:10","slug":"%e3%80%90uos%e8%bf%90%e7%bb%b4%e5%ad%a6%e4%b9%a0%e7%ac%94%e8%ae%b0%e3%80%91-vsftp%e6%9c%8d%e5%8a%a1","status":"publish","type":"post","link":"https:\/\/www.fatesky.com\/?p=3153","title":{"rendered":"\u3010UOS\u8fd0\u7ef4\u5b66\u4e60\u7b14\u8bb0\u3011- VSFTP\u670d\u52a1"},"content":{"rendered":"\n

\u4e00\u3001\u5173\u4e8eFTP<\/h2>\n\n\n\n

FTP \u662f File Transfer Protocol\uff08\u6587\u4ef6\u4f20\u8f93\u534f\u8bae\uff09\u7684\u82f1\u6587\u7b80\u79f0\uff0c\u800c\u4e2d\u6587\u7b80\u79f0\u4e3a”\u6587\u4f20\u534f\u8bae”\u3002\u7528\u4e8eInternet \u4e0a\u7684\u63a7\u5236\u6587\u4ef6\u7684\u53cc\u5411\u4f20\u8f93\u3002\u540c\u65f6\uff0c\u5b83\u4e5f\u662f\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\uff08Application\uff09\u3002\u57fa\u4e8e\u4e0d\u540c\u7684\u64cd\u4f5c\u7cfb\u7edf\u6709\u4e0d\u540c\u7684 FTP \u5e94\u7528\u7a0b\u5e8f\uff0c\u800c\u6240\u6709\u8fd9\u4e9b\u5e94\u7528\u7a0b\u5e8f\u90fd\u9075\u5b88\u540c\u4e00\u79cd\u534f\u8bae\u4ee5\u4f20\u8f93\u6587\u4ef6\u3002\u5728FTP \u7684\u4f7f\u7528\u5f53\u4e2d\uff0c\u7528\u6237\u7ecf\u5e38\u9047\u5230\u4e24\u4e2a\u6982\u5ff5\uff1a”\u4e0b\u8f7d”\uff08Download\uff09\u548c”\u4e0a\u4f20”\uff08Upload\uff09\u3002”\u4e0b\u8f7d” \u6587\u4ef6\u5c31\u662f\u4ece\u8fdc\u7a0b\u4e3b\u673a\u62f7\u8d1d\u6587\u4ef6\u81f3\u81ea\u5df1\u7684\u8ba1\u7b97\u673a\u4e0a\uff1b”\u4e0a\u4f20”\u6587\u4ef6\u5c31\u662f\u5c06\u6587\u4ef6\u4ece\u81ea\u5df1\u7684\u8ba1\u7b97\u673a\u4e2d\u62f7\u8d1d\u81f3\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u3002\u7528 Internet \u8bed\u8a00\u6765\u8bf4\uff0c\u7528\u6237\u53ef\u901a\u8fc7\u5ba2\u6237\u673a\u7a0b\u5e8f\u5411\uff08\u4ece\uff09\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u4f20\uff08\u4e0b\u8f7d\uff09\u6587\u4ef6\u3002<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n

FTP \u7684\u5de5\u4f5c\u6a21\u5f0f<\/strong>\uff1a
Port \u6a21\u5f0f\uff08\u4e3b\u52a8\u6a21\u5f0f\uff09 FTP \u5ba2\u6237\u7aef\u9996\u5148\u548c\u670d\u52a1\u5668\u7684 TCP 21 \u7aef\u53e3\u5efa\u7acb\u8fde\u63a5\uff0c\u7528\u6765\u53d1\u9001\u547d\u4ee4\uff0c\u5ba2\u6237\u7aef\u9700\u8981\u63a5\u6536\u6570\u636e\u7684\u65f6\u5019\u5728\u8fd9\u4e2a\u901a\u9053\u4e0a\u53d1\u9001 PORT \u547d\u4ee4\u3002PORT \u547d\u4ee4\u5305\u542b\u4e86\u5ba2\u6237\u7aef\u7528\u4ec0\u4e48\u7aef\u53e3\u63a5\u6536\u6570\u636e\u3002\u5728\u4f20\u9001\u6570\u636e\u7684\u65f6\u5019\uff0c\u670d\u52a1\u5668\u7aef\u901a\u8fc7\u81ea\u5df1\u7684 TCP 20 \u7aef\u53e3\u8fde\u63a5\u81f3\u5ba2\u6237\u7aef\u7684\u6307\u5b9a\u7aef\u53e3\u53d1\u9001\u6570\u636e\u3002FTP server \u5fc5\u987b\u548c\u5ba2\u6237\u7aef\u5efa\u7acb\u4e00\u4e2a\u65b0\u7684\u8fde\u63a5\u7528\u6765\u4f20\u9001\u6570\u636e\u3002Passive \u6a21\u5f0f\uff08\u88ab\u52a8\u6a21\u5f0f\uff09 \u5efa\u7acb\u63a7\u5236\u901a\u9053\u548c Standard \u6a21\u5f0f\u7c7b\u4f3c\uff0c\u4f46\u5efa\u7acb\u8fde\u63a5\u540e\u53d1\u9001 Pasv \u547d\u4ee4\u3002\u670d\u52a1\u5668\u6536\u5230 Pasv \u547d\u4ee4\u540e\uff0c\u6253\u5f00\u4e00\u4e2a\u4e34\u65f6\u7aef\u53e3\uff08\u7aef\u53e3\u53f7\u5927\u4e8e 1023 \u5c0f\u4e8e 65535\uff09\u5e76\u4e14\u901a\u77e5\u5ba2\u6237\u7aef\u5728\u8fd9\u4e2a\u7aef\u53e3\u4e0a\u4f20\u9001\u6570\u636e\u7684\u8bf7\u6c42\uff0c\u5ba2\u6237\u7aef\u8fde\u63a5 FTP \u670d\u52a1\u5668\u6b64\u7aef\u53e3\uff0c\u7136\u540e FTP \u670d\u52a1\u5668\u5c06\u901a\u8fc7\u8fd9\u4e2a\u7aef\u53e3\u4f20\u9001\u6570\u636e\u3002
\u5f88\u591a\u9632\u706b\u5899\u5728\u8bbe\u7f6e\u7684\u65f6\u5019\u90fd\u662f\u4e0d\u5141\u8bb8\u63a5\u53d7\u5916\u90e8\u53d1\u8d77\u7684\u8fde\u63a5\u7684\uff0c\u6240\u4ee5\u8bb8\u591a\u4f4d\u4e8e\u9632\u706b\u5899\u540e\u6216\u5185\u7f51\u7684FTP \u670d\u52a1\u5668\u4e0d\u652f\u6301 PASV \u6a21\u5f0f\uff0c\u56e0\u4e3a\u5ba2\u6237\u7aef\u65e0\u6cd5\u7a7f\u8fc7\u9632\u706b\u5899\u6253\u5f00 FTP \u670d\u52a1\u5668\u7684\u9ad8\u7aef\u7aef\u53e3\uff1b\u800c\u8bb8\u591a\u5185\u7f51\u7684\u5ba2\u6237\u7aef\u4e0d\u80fd\u7528 PORT \u6a21\u5f0f\u767b\u9646 FTP \u670d\u52a1\u5668\uff0c\u56e0\u4e3a\u4ece\u670d\u52a1\u5668\u7684 TCP 20 \u65e0\u6cd5\u548c\u5185\u90e8\u7f51\u7edc\u7684\u5ba2\u6237\u7aef\u5efa\u7acb\u4e00\u4e2a\u65b0\u7684\u8fde\u63a5\uff0c\u9020\u6210\u65e0\u6cd5\u5de5\u4f5c\u3002
\u4e3b\u52a8 FTP \u5bf9 FTP \u670d\u52a1\u5668\u7684\u7ba1\u7406\u6709\u5229\uff0c\u4f46\u5bf9\u5ba2\u6237\u7aef\u7684\u7ba1\u7406\u4e0d\u5229\u3002\u56e0\u4e3a FTP \u670d\u52a1\u5668\u4f01\u56fe\u4e0e\u5ba2\u6237\u7aef\u7684\u9ad8\u4f4d\u968f\u673a\u7aef\u53e3\u5efa\u7acb\u8fde\u63a5\uff0c\u800c\u8fd9\u4e2a\u7aef\u53e3\u5f88\u6709\u53ef\u80fd\u88ab\u5ba2\u6237\u7aef\u7684\u9632\u706b\u5899\u963b\u585e\u6389\u3002\u88ab\u52a8 FTP \u5bf9 FTP\u5ba2\u6237\u7aef\u7684\u7ba1\u7406\u6709\u5229\uff0c\u4f46\u5bf9\u670d\u52a1\u5668\u7aef\u7684\u7ba1\u7406\u4e0d\u5229\u3002\u56e0\u4e3a\u5ba2\u6237\u7aef\u8981\u4e0e\u670d\u52a1\u5668\u7aef\u5efa\u7acb\u4e24\u4e2a\u8fde\u63a5\uff0c\u5176\u4e2d\u4e00\u4e2a\u8fde\u5230\u4e00\u4e2a\u9ad8\u4f4d\u968f\u673a\u7aef\u53e3\uff0c\u800c\u8fd9\u4e2a\u7aef\u53e3\u5f88\u6709\u53ef\u80fd\u88ab\u670d\u52a1\u5668\u7aef\u7684\u9632\u706b\u5899\u963b\u585e\u6389\u3002
vsftpd \u662f”very secure FTP daemon”\u7684\u7f29\u5199\uff0c\u5b89\u5168\u6027\u662f\u5b83\u7684\u4e00\u4e2a\u6700\u5927\u7684\u7279\u70b9\u3002vsftpd \u662f\u4e00\u4e2aUNIX \u7c7b\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u8fd0\u884c\u7684\u670d\u52a1\u5668\u7684\u540d\u5b57\uff0c\u5b83\u53ef\u4ee5\u8fd0\u884c\u5728\u8bf8\u5982 Linux\u3001BSD\u3001Solaris\u3001 HP-UNIX\u7b49\u7cfb\u7edf\u4e0a\u9762\uff0c\u662f\u4e00\u4e2a\u5b8c\u5168\u514d\u8d39\u7684\u3001\u5f00\u53d1\u6e90\u4ee3\u7801\u7684 ftp \u670d\u52a1\u5668\u8f6f\u4ef6\uff0c\u652f\u6301\u5f88\u591a\u5176\u4ed6\u7684 FTP \u670d\u52a1\u5668\u6240\u4e0d\u652f\u6301\u7684\u7279\u5f81\u3002\u6bd4\u5982\uff1a\u975e\u5e38\u9ad8\u7684\u5b89\u5168\u6027\u9700\u6c42\u3001\u5e26\u5bbd\u9650\u5236\u3001\u826f\u597d\u7684\u53ef\u4f38\u7f29\u6027\u3001\u53ef\u521b\u5efa\u865a\u62df\u7528\u6237\u3001\u652f\u6301 IPv6\u3001\u901f\u7387\u9ad8\u7b49\u3002\u662f\u4e00\u6b3e\u5728 Linux \u53d1\u884c\u7248\u4e2d\u6700\u53d7\u63a8\u5d07\u7684 FTP \u670d\u52a1\u5668\u7a0b\u5e8f\u3002\u7279\u70b9\u662f\u5c0f\u5de7\u8f7b\u5feb\uff0c\u5b89\u5168\u6613\u7528\u3002\u5728\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u5e38\u7528\u7684 FTPD \u5957\u4ef6\u4e3b\u8981\u8fd8\u6709 ProFTPD\u3001PureFTPd \u548c wuftpd\u7b49<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n

\u4e8c\u3001\u642d \u5efa ftp \u670d\u52a1<\/h2>\n\n\n\n

\uff01\uff01\uff01\u6ce8\u610f\uff01\u5b9e\u9a8c\u65f6\u4e00\u5b9a\u8981\u968f\u65f6\u5907\u4efd\u914d\u7f6e\u6587\u4ef6
cp \/etc\/vsftpd.conf{,.bak}<\/code>
\uff081\uff09\u5b89\u88c5 vsftpd<\/strong>(\u5728\u670d\u52a1\u5668\u4e0a\u64cd\u4f5c)
apt -y install vsftpd
systemctl start vsftpd
ss -anptu |grep 21<\/code>

\uff082\uff09\u914d\u7f6e\u53c2\u6570\u8be6\u89e3<\/strong>
1.\u9ed8\u8ba4\u914d\u7f6e\uff1a
1>\u5141\u8bb8\u533f\u540d\u7528\u6237\u548c\u672c\u5730\u7528\u6237\u767b\u9646\u3002
anonymous_enable=YES
local_enable=YES
2>\u533f\u540d\u7528\u6237\u4f7f\u7528\u7684\u767b\u9646\u540d\u4e3a ftp \u6216 anonymous\uff0c\u53e3\u4ee4\u4e3a\u7a7a\uff1b\u533f\u540d\u7528\u6237\u4e0d\u80fd\u79bb\u5f00\u533f\u540d\u7528\u6237\u5bb6\u76ee\u5f55\/var\/ftp,\u4e14\u53ea\u80fd\u4e0b\u8f7d\u4e0d\u80fd\u4e0a\u4f20\u3002
3>\u672c\u5730\u7528\u6237\u7684\u767b\u5f55\u540d\u4e3a\u672c\u5730\u7528\u6237\u540d\uff0c\u53e3\u4ee4\u4e3a\u6b64\u672c\u5730\u7528\u6237\u7684\u53e3\u4ee4\uff1b\u672c\u5730\u7528\u6237\u53ef\u4ee5\u5728\u81ea \u5df1\u5bb6\u76ee\u5f55\u4e2d\u8fdb\u884c\u8bfb\u5199\u64cd\u4f5c\uff1b\u672c\u5730\u7528\u6237\u53ef\u4ee5\u79bb\u5f00\u81ea\u5bb6\u76ee\u5f55\u5207\u6362\u81f3\u6709\u6743\u9650\u8bbf\u95ee\u7684\u5176\u4ed6\u76ee\u5f55\uff0c\u5e76\u5728\u6743\u9650\u5141\u8bb8\u7684\u60c5\u51b5\u4e0b\u8fdb\u884c\u4e0a\u4f20\/\u4e0b\u8f7d\u3002
write_enable=YES
4>\u5199\u5728\u6587\u4ef6\/etc\/vsftpd.ftpusers \u4e2d\u7684\u672c\u5730\u7528\u6237\u7981\u6b62\u767b\u9646\u3002

2.\u914d\u7f6e\u6587\u4ef6\u683c\u5f0f\uff1a<\/strong>
vsftpd.conf \u7684\u5185\u5bb9\u975e\u5e38\u5355\u7eaf\uff0c\u6bcf\u4e00\u884c\u5373\u4e3a\u4e00\u9879\u8bbe\u5b9a\u3002\u82e5\u662f\u7a7a\u767d\u884c\u6216\u662f\u5f00\u5934\u4e3a#\u7684\u4e00\u884c\uff0c\u5c06\u4f1a\u88ab\u5ffd\u7565\u3002\u5185\u5bb9\u7684\u683c\u5f0f\u53ea\u6709\u4e00\u79cd\uff0c\u5982\u6240\u793aoption=value\u8981\u6ce8\u610f\u7684\u662f\uff0c\u7b49\u53f7\u4e24\u8fb9\u4e0d\u80fd\u52a0\u7a7a\u767d\u3002

3.\u533f\u540d\u7528\u6237\uff08anonymous\uff09\u8bbe\u7f6e<\/strong>
anonymous_enable=YES\/NO\uff08YES\uff09
\u63a7\u5236\u662f\u5426\u5141\u8bb8\u533f\u540d\u7528\u6237\u767b\u5165\uff0cYES \u4e3a\u5141\u8bb8\u533f\u540d\u767b\u5165\uff0cNO \u4e3a\u4e0d\u5141\u8bb8\u3002\u9ed8\u8ba4\u503c\u4e3aYES\u3002
write_enable=YES\/NO\uff08YES\uff09
\u662f\u5426\u5141\u8bb8\u767b\u9646\u7528\u6237\u6709\u5199\u6743\u9650\u3002\u5c5e\u4e8e\u5168\u5c40\u8bbe\u7f6e\uff0c\u9ed8\u8ba4\u503c\u4e3a YES\u3002
no_anon_password=YES\/NO\uff08NO\uff09
\u82e5\u662f\u542f\u52a8\u8fd9\u9879\u529f\u80fd\uff0c\u5219\u4f7f\u7528\u533f\u540d\u767b\u5165\u65f6\uff0c\u4e0d\u4f1a\u8be2\u95ee\u5bc6\u7801\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
ftp_username=ftp
\u5b9a\u4e49\u533f\u540d\u767b\u5165\u7684\u4f7f\u7528\u8005\u540d\u79f0\u3002\u9ed8\u8ba4\u503c\u4e3a ftp\u3002
anon_root=\/var\/ftp
\u4f7f\u7528\u533f\u540d\u767b\u5165\u65f6\uff0c\u6240\u767b\u5165\u7684\u76ee\u5f55\u3002\u9ed8\u8ba4\u503c\u4e3a\/var\/ftp\u3002\u6ce8\u610f ftp \u76ee\u5f55\u4e0d\u80fd\u662f 777 \u7684\u6743\u9650\u5c5e\u6027\uff0c\u5373\u533f\u540d\u7528\u6237\u7684\u5bb6\u76ee\u5f55\u4e0d\u80fd\u6709 777 \u7684\u6743\u9650\u3002
anon_upload_enable=YES\/NO\uff08NO\uff09
\u5982\u679c\u8bbe\u4e3a YES\uff0c\u5219\u5141\u8bb8\u533f\u540d\u767b\u5165\u8005\u6709\u4e0a\u4f20\u6587\u4ef6\uff08\u975e\u76ee\u5f55\uff09\u7684\u6743\u9650\uff0c\u53ea\u6709\u5728 write_enable=YES \u65f6\uff0c\u6b64\u9879\u624d\u6709\u6548\u3002\u5f53\u7136\uff0c\u533f\u540d\u7528\u6237\u5fc5\u987b\u8981\u6709\u5bf9\u4e0a\u5c42\u76ee\u5f55\u7684\u5199\u5165\u6743\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
anon_world_readable_only=YES\/NO\uff08YES\uff09
\u5982\u679c\u8bbe\u4e3a YES\uff0c\u5219\u5141\u8bb8\u533f\u540d\u767b\u5165\u8005\u4e0b\u8f7d\u53ef\u9605\u8bfb\u7684\u6863\u6848\uff08\u53ef\u4ee5\u4e0b\u8f7d\u5230\u672c\u673a\u9605\u8bfb\uff0c\u4e0d\u80fd\u76f4\u63a5\u5728 FTP\u670d\u52a1\u5668\u4e2d\u6253\u5f00\u9605\u8bfb\uff09\u3002\u9ed8\u8ba4\u503c\u4e3a YES\u3002
anon_mkdir_write_enable=YES\/NO\uff08NO\uff09
\u5982\u679c\u8bbe\u4e3a YES\uff0c\u5219\u5141\u8bb8\u533f\u540d\u767b\u5165\u8005\u6709\u65b0\u589e\u76ee\u5f55\u7684\u6743\u9650\uff0c\u53ea\u6709\u5728 write_enable=YES \u65f6\uff0c\u6b64\u9879\u624d\u6709\u6548\u3002\u5f53\u7136\uff0c\u533f\u540d\u7528\u6237\u5fc5\u987b\u8981\u6709\u5bf9\u4e0a\u5c42\u76ee\u5f55\u7684\u5199\u5165\u6743\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
anon_other_write_enable=YES\/NO\uff08NO\uff09
\u5982\u679c\u8bbe\u4e3a YES\uff0c\u5219\u5141\u8bb8\u533f\u540d\u767b\u5165\u8005\u66f4\u591a\u4e8e\u4e0a\u4f20\u6216\u8005\u5efa\u7acb\u76ee\u5f55\u4e4b\u5916\u7684\u6743\u9650\uff0c\u8b6c\u5982\u5220\u9664\u6216\u8005\u91cd\u547d\u540d\u3002
\uff08\u5982\u679c anon_upload_enable=NO\uff0c\u5219\u533f\u540d\u7528\u6237\u4e0d\u80fd\u4e0a\u4f20\u6587\u4ef6\uff0c\u4f46\u53ef\u4ee5\u5220\u9664\u6216\u8005\u91cd\u547d\u540d\u5df2\u7ecf\u5b58\u5728\u7684\u6587\u4ef6\uff1b\u5982\u679c anon_mkdir_write_enable=NO\uff0c\u5219\u533f\u540d\u7528\u6237\u4e0d\u80fd\u4e0a\u4f20\u6216\u8005\u65b0\u5efa\u6587\u4ef6\u5939\uff0c\u4f46\u53ef\u4ee5\u5220\u9664\u6216\u8005\u91cd\u547d\u540d\u5df2\u7ecf\u5b58\u5728\u7684\u6587\u4ef6\u5939\u3002\uff09\u9ed8\u8ba4\u503c\u4e3a NO\u3002
chown_uploads=YES\/NO\uff08NO\uff09
\u8bbe\u7f6e\u662f\u5426\u6539\u53d8\u533f\u540d\u7528\u6237\u4e0a\u4f20\u6587\u4ef6\uff08\u975e\u76ee\u5f55\uff09\u7684\u5c5e\u4e3b\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
chown_username=username
\u8bbe\u7f6e\u533f\u540d\u7528\u6237\u4e0a\u4f20\u6587\u4ef6\uff08\u975e\u76ee\u5f55\uff09\u7684\u5c5e\u4e3b\u540d\u3002\u5efa\u8bae\u4e0d\u8981\u8bbe\u7f6e\u4e3a root\u3002
anon_umask=077
\u8bbe\u7f6e\u533f\u540d\u767b\u5165\u8005\u65b0\u589e\u6216\u4e0a\u4f20\u6863\u6848\u65f6\u7684 umask \u503c\u3002\u9ed8\u8ba4\u503c\u4e3a 077\uff0c\u5219\u65b0\u5efa\u6863\u6848\u7684\u5bf9\u5e94\u6743\u9650\u4e3a 700\u3002
deny_email_enable=YES\/NO\uff08NO\uff09
\u82e5\u662f\u542f\u52a8\u8fd9\u9879\u529f\u80fd\uff0c\u5219\u5fc5\u987b\u63d0\u4f9b\u4e00\u4e2a\u6863\u6848\/etc\/vsftpd\/banner_emails\uff0c\u5185\u5bb9\u4e3a email address\u3002\u82e5\u662f\u4f7f\u7528\u533f\u540d\u767b\u5165\uff0c\u5219\u4f1a\u8981\u6c42\u8f93\u5165 email address\uff0c\u82e5\u8f93\u5165\u7684 email address \u5728\u6b64\u6863\u6848\u5185\uff0c\u5219\u4e0d\u5141\u8bb8\u8fdb\u5165\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
banned_email_file=\/etc\/vsftpd\/banner_emails
\u6b64\u6587\u4ef6\u7528\u6765\u8f93\u5165 email address\uff0c\u53ea\u6709\u5728 deny_email_enable=YES \u65f6\uff0c\u624d\u4f1a\u4f7f\u7528\u5230\u6b64\u6863\u6848\u3002\u82e5\u662f\u4f7f\u7528\u533f\u540d\u767b\u5165\uff0c\u5219\u4f1a\u8981\u6c42\u8f93\u5165 email address\uff0c\u82e5\u8f93\u5165\u7684 email address \u5728\u6b64\u6863\u6848\u5185\uff0c\u5219\u4e0d\u5141\u8bb8\u8fdb\u5165\u3002

4.\u672c\u5730\u7528\u6237\u8bbe\u7f6e<\/strong>
local_enable=YES\/NO\uff08YES\uff09
\u63a7\u5236\u662f\u5426\u5141\u8bb8\u672c\u5730\u7528\u6237\u767b\u5165\uff0cYES \u4e3a\u5141\u8bb8\u672c\u5730\u7528\u6237\u767b\u5165\uff0cNO \u4e3a\u4e0d\u5141\u8bb8\u3002\u9ed8\u8ba4\u503c\u4e3a YES\u3002
local_root=\/home\/username
\u5f53\u672c\u5730\u7528\u6237\u767b\u5165\u65f6\uff0c\u5c06\u88ab\u66f4\u6362\u5230\u5b9a\u4e49\u7684\u76ee\u5f55\u4e0b\u3002\u9ed8\u8ba4\u503c\u4e3a\u5404\u7528\u6237\u7684\u5bb6\u76ee\u5f55\u3002
write_enable=YES\/NO\uff08YES\uff09
\u662f\u5426\u5141\u8bb8\u767b\u9646\u7528\u6237\u6709\u5199\u6743\u9650\u3002\u5c5e\u4e8e\u5168\u5c40\u8bbe\u7f6e\uff0c\u9ed8\u8ba4\u503c\u4e3a YES\u3002
local_umask=022
\u672c\u5730\u7528\u6237\u65b0\u589e\u6863\u6848\u65f6\u7684 umask \u503c\u3002\u9ed8\u8ba4\u503c\u4e3a 077\u3002
file_open_mode=0755
\u672c\u5730\u7528\u6237\u4e0a\u4f20\u6863\u6848\u540e\u7684\u6863\u6848\u6743\u9650\uff0c\u4e0e chmod \u6240\u4f7f\u7528\u7684\u6570\u503c\u76f8\u540c\u3002\u9ed8\u8ba4\u503c\u4e3a 0666\u3002

5.\u6b22\u8fce\u8bed\u8bbe\u7f6e<\/strong>
dirmessage_enable=YES\/NO\uff08YES\uff09
\u5982\u679c\u542f\u52a8\u8fd9\u4e2a\u9009\u9879\uff0c\u90a3\u4e48\u4f7f\u7528\u8005\u7b2c\u4e00\u6b21\u8fdb\u5165\u4e00\u4e2a\u76ee\u5f55\u65f6\uff0c\u4f1a\u68c0\u67e5\u8be5\u76ee\u5f55\u4e0b\u662f\u5426\u6709.message \u8fd9\u4e2a\u6863\u6848\uff0c\u5982\u679c\u6709\uff0c\u5219\u4f1a\u51fa\u73b0\u6b64\u6863\u6848\u7684\u5185\u5bb9\uff0c\u901a\u5e38\u8fd9\u4e2a\u6863\u6848\u4f1a\u653e\u7f6e\u6b22\u8fce\u8bdd\u8bed\uff0c\u6216\u662f\u5bf9\u8be5\u76ee\u5f55\u7684\u8bf4\u660e\u3002\u9ed8\u8ba4\u503c\u4e3a\u5f00\u542f\u3002
message_file=.message
\u8bbe\u7f6e\u76ee\u5f55\u6d88\u606f\u6587\u4ef6\uff0c\u53ef\u5c06\u8981\u663e\u793a\u7684\u4fe1\u606f\u5199\u5165\u8be5\u6587\u4ef6\u3002\u9ed8\u8ba4\u503c\u4e3a.message\u3002
banner_file=\/etc\/vsftpd\/banner
\u5f53\u4f7f\u7528\u8005\u767b\u5165\u65f6\uff0c\u4f1a\u663e\u793a\u6b64\u8bbe\u5b9a\u6240\u5728\u7684\u6863\u6848\u5185\u5bb9\uff0c\u901a\u5e38\u4e3a\u6b22\u8fce\u8bdd\u8bed\u6216\u662f\u8bf4\u660e\u3002\u9ed8\u8ba4\u503c\u4e3a\u65e0\u3002\u5982\u679c\u6b22\u8fce\u4fe1\u606f\u8f83\u591a\uff0c\u5219\u4f7f\u7528\u8be5\u914d\u7f6e\u9879\u3002
ftpd_banner=Welcome to BOB’s FTP server
\u8fd9\u91cc\u7528\u6765\u5b9a\u4e49\u6b22\u8fce\u8bdd\u8bed\u7684\u5b57\u7b26\u4e32\uff0cbanner_file \u662f\u6863\u6848\u7684\u5f62\u5f0f\uff0c\u800c ftpd_banner \u5219\u662f\u5b57\u7b26\u4e32\u7684\u5f62\u5f0f\u3002\u9884\u8bbe\u4e3a\u65e0\u3002

6.\u63a7\u5236\u7528\u6237\u662f\u5426\u5141\u8bb8\u5207\u6362\u5230\u4e0a\u7ea7\u76ee\u5f55<\/strong>
\u5728\u9ed8\u8ba4\u914d\u7f6e\u4e0b\uff0c\u672c\u5730\u7528\u6237\u767b\u5165 FTP \u540e\u53ef\u4ee5\u4f7f\u7528 cd \u547d\u4ee4\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\uff0c\u8fd9\u6837\u4f1a\u5bf9\u7cfb\u7edf\u5e26\u6765\u5b89\u5168\u9690\u60a3\u3002\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u4e09\u6761\u914d\u7f6e\u6587\u4ef6\u6765\u63a7\u5236\u7528\u6237\u5207\u6362\u76ee\u5f55\u3002
chroot_list_enable=YES\/NO\uff08NO\uff09
\u8bbe\u7f6e\u662f\u5426\u542f\u7528 chroot_list_file \u914d\u7f6e\u9879\u6307\u5b9a\u7684\u7528\u6237\u5217\u8868\u6587\u4ef6\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
chroot_list_file=\/etc\/vsftpd.chroot_list
\u7528\u4e8e\u6307\u5b9a\u7528\u6237\u5217\u8868\u6587\u4ef6\uff0c\u8be5\u6587\u4ef6\u7528\u4e8e\u63a7\u5236\u54ea\u4e9b\u7528\u6237\u53ef\u4ee5\u5207\u6362\u5230\u7528\u6237\u5bb6\u76ee\u5f55\u7684\u4e0a\u7ea7\u76ee\u5f55\u3002
chroot_local_user=YES\/NO\uff08NO\uff09
\u7528\u4e8e\u6307\u5b9a\u7528\u6237\u5217\u8868\u6587\u4ef6\u4e2d\u7684\u7528\u6237\u662f\u5426\u5141\u8bb8\u5207\u6362\u5230\u4e0a\u7ea7\u76ee\u5f55\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
\u901a\u8fc7\u642d\u914d\u80fd\u5b9e\u73b0\u4ee5\u4e0b\u51e0\u79cd\u6548\u679c\uff1a
\u2460\u5f53 chroot_list_enable=YES\uff0cchroot_local_user=YES \u65f6\uff0c\u5728\/etc\/vsftpd.chroot_list \u6587\u4ef6\u4e2d\u5217\u51fa\u7684\u7528\u6237\uff0c\u53ef\u4ee5\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\uff1b\u672a\u5728\u6587\u4ef6\u4e2d\u5217\u51fa\u7684\u7528\u6237\uff0c\u4e0d\u80fd\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\u3002
\u2461\u5f53 chroot_list_enable=YES\uff0cchroot_local_user=NO \u65f6\uff0c\u5728\/etc\/vsftpd.chroot_list \u6587\u4ef6\u4e2d\u5217\u51fa\u7684\u7528\u6237\uff0c\u4e0d\u80fd\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\uff1b\u672a\u5728\u6587\u4ef6\u4e2d\u5217\u51fa\u7684\u7528\u6237\uff0c\u53ef\u4ee5\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\u3002
\u2462\u5f53 chroot_list_enable=NO\uff0cchroot_local_user=YES \u65f6\uff0c\u6240\u6709\u7684\u7528\u6237\u5747\u4e0d\u80fd\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\u3002
\u2463\u5f53 chroot_list_enable=NO\uff0cchroot_local_user=NO \u65f6\uff0c\u6240\u6709\u7684\u7528\u6237\u5747\u53ef\u4ee5\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\u3002

7.\u6570\u636e\u4f20\u8f93\u6a21\u5f0f\u8bbe\u7f6e<\/strong>
FTP \u5728\u4f20\u8f93\u6570\u636e\u65f6\uff0c\u53ef\u4ee5\u4f7f\u7528\u4e8c\u8fdb\u5236\u65b9\u5f0f\uff0c\u4e5f\u53ef\u4ee5\u4f7f\u7528 ASCII \u6a21\u5f0f\u6765\u4e0a\u4f20\u6216\u4e0b\u8f7d\u6570\u636e\u3002
ascii_upload_enable=YES\/NO\uff08NO\uff09
\u8bbe\u7f6e\u662f\u5426\u542f\u7528 ASCII \u6a21\u5f0f\u4e0a\u4f20\u6570\u636e\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
ascii_download_enable=YES\/NO\uff08NO\uff09
\u8bbe\u7f6e\u662f\u5426\u542f\u7528 ASCII \u6a21\u5f0f\u4e0b\u8f7d\u6570\u636e\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002

8.\u8bbf\u95ee\u63a7\u5236\u8bbe\u7f6e<\/strong>
\u4e24\u79cd\u63a7\u5236\u65b9\u5f0f\uff1a\u4e00\u79cd\u63a7\u5236\u4e3b\u673a\u8bbf\u95ee\uff0c\u53e6\u4e00\u79cd\u63a7\u5236\u7528\u6237\u8bbf\u95ee\u3002
\u2460\u63a7\u5236\u4e3b\u673a\u8bbf\u95ee\uff1a
tcp_wrappers=YES\/NO\uff08YES\uff09
\u8bbe\u7f6e vsftpd \u662f\u5426\u4e0e tcp wrapper \u76f8\u7ed3\u5408\u6765\u8fdb\u884c\u4e3b\u673a\u7684\u8bbf\u95ee\u63a7\u5236\u3002\u9ed8\u8ba4\u503c\u4e3a YES\u3002\u5982\u679c\u542f\u7528\uff0c\u5219vsftpd \u670d\u52a1\u5668\u4f1a\u68c0\u67e5\/etc\/hosts.allow \u548c\/etc\/hosts.deny \u4e2d\u7684\u8bbe\u7f6e\uff0c\u6765\u51b3\u5b9a\u8bf7\u6c42\u8fde\u63a5\u7684\u4e3b\u673a\uff0c\u662f\u5426\u5141\u8bb8\u8bbf\u95ee\u8be5 FTP \u670d\u52a1\u5668\u3002\u8fd9\u4e24\u4e2a\u6587\u4ef6\u53ef\u4ee5\u8d77\u5230\u7b80\u6613\u7684\u9632\u706b\u5899\u529f\u80fd\u3002
\u6bd4\u5982\uff1a\u82e5\u8981\u4ec5\u5141\u8bb8 192.168.0.1\u2014192.168.0.254 \u7684\u7528\u6237\u53ef\u4ee5\u8fde\u63a5 FTP \u670d\u52a1\u5668\uff0c\u5219\u5728\/etc\/hosts. allow \u6587\u4ef6\u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff1a
vsftpd:192.168.0. :allow
all:all :deny
\u2461\u63a7\u5236\u7528\u6237\u8bbf\u95ee\uff1a
\u5bf9\u4e8e\u7528\u6237\u7684\u8bbf\u95ee\u63a7\u5236\u53ef\u4ee5\u901a\u8fc7\/etc \u76ee\u5f55\u4e0b\u7684 vsftpd.user_list \u548c ftpusers \u6587\u4ef6\u6765\u5b9e\u73b0\u3002
userlist_file=\/etc\/vsftpd.user_list
\u63a7\u5236\u7528\u6237\u8bbf\u95ee FTP \u7684\u6587\u4ef6\uff0c\u91cc\u9762\u5199\u7740\u7528\u6237\u540d\u79f0\u3002\u4e00\u4e2a\u7528\u6237\u540d\u79f0\u4e00\u884c\u3002
userlist_enable=YES\/NO\uff08NO\uff09
\u662f\u5426\u542f\u7528 vsftpd.user_list \u6587\u4ef6\u3002
userlist_deny=YES\/NO\uff08YES\uff09
\u51b3\u5b9a vsftpd.user_list \u6587\u4ef6\u4e2d\u7684\u7528\u6237\u662f\u5426\u80fd\u591f\u8bbf\u95ee FTP \u670d\u52a1\u5668\u3002\u82e5\u8bbe\u7f6e\u4e3a YES\uff0c\u5219 vsftpd.user_list \u6587\u4ef6\u4e2d\u7684\u7528\u6237\u4e0d\u5141\u8bb8\u8bbf\u95ee FTP\uff0c\u82e5\u8bbe\u7f6e\u4e3a NO\uff0c\u5219\u53ea\u6709 vsftpd.user_list \u6587\u4ef6\u4e2d\u7684\u7528\u6237\u624d\u80fd\u8bbf
\u95ee FTP\u3002
\/etc\/vsftpd\/ftpusers \u6587\u4ef6\u4e13\u95e8\u7528\u4e8e\u5b9a\u4e49\u4e0d\u5141\u8bb8\u8bbf\u95ee FTP \u670d\u52a1\u5668\u7684\u7528\u6237\u5217\u8868\uff08\u6ce8\u610f:\u5982\u679c userlist_enable=YES,userlist_deny=NO,\u6b64\u65f6\u5982\u679c\u5728 vsftpd.user_list \u548c ftpusers \u4e2d\u90fd\u6709\u67d0\u4e2a\u7528\u6237\u65f6\uff0c\u90a3\u4e48\u8fd9\u4e2a\u7528\u6237\u662f\u4e0d\u80fd\u591f\u8bbf\u95ee FTP \u7684\uff0c\u5373 ftpusers \u7684\u4f18\u5148\u7ea7\u8981\u9ad8\uff09\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b vsftpd.user_list \u548cftpusers\uff0c\u8fd9\u4e24\u4e2a\u6587\u4ef6\u5df2\u7ecf\u9884\u8bbe\u7f6e\u4e86\u4e00\u4e9b\u4e0d\u5141\u8bb8\u8bbf\u95ee FTP \u670d\u52a1\u5668\u7684\u7cfb\u7edf\u5185\u90e8\u8d26\u6237\u3002\u5982\u679c\u7cfb\u7edf\u6ca1\u6709\u8fd9\u4e24\u4e2a\u6587\u4ef6\uff0c\u90a3\u4e48\u65b0\u5efa\u8fd9\u4e24\u4e2a\u6587\u4ef6\uff0c\u5c06\u7528\u6237\u6dfb\u52a0\u8fdb\u53bb\u5373\u53ef\u3002

9.\u8bbf\u95ee\u901f\u7387\u8bbe\u7f6e<\/strong>
anon_max_rate=0
\u8bbe\u7f6e\u533f\u540d\u767b\u5165\u8005\u4f7f\u7528\u7684\u6700\u5927\u4f20\u8f93\u901f\u5ea6\uff0c\u5355\u4f4d\u4e3a B\/s\uff0c0 \u8868\u793a\u4e0d\u9650\u5236\u901f\u5ea6\u3002\u9ed8\u8ba4\u503c\u4e3a 0\u3002
local_max_rate=0
\u672c\u5730\u7528\u6237\u4f7f\u7528\u7684\u6700\u5927\u4f20\u8f93\u901f\u5ea6\uff0c\u5355\u4f4d\u4e3a B\/s\uff0c0 \u8868\u793a\u4e0d\u9650\u5236\u901f\u5ea6\u3002\u9884\u8bbe\u503c\u4e3a 0\u3002

10.\u8d85\u65f6\u65f6\u95f4\u8bbe\u7f6e<\/strong>
accept_timeout=60
\u8bbe\u7f6e\u5efa\u7acb FTP \u8fde\u63a5\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u5355\u4f4d\u4e3a\u79d2\u3002\u9ed8\u8ba4\u503c\u4e3a 60\u3002
connect_timeout=60
PORT \u65b9\u5f0f\u4e0b\u5efa\u7acb\u6570\u636e\u8fde\u63a5\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u5355\u4f4d\u4e3a\u79d2\u3002\u9ed8\u8ba4\u503c\u4e3a 60\u3002
data_connection_timeout=120
\u8bbe\u7f6e\u5efa\u7acb FTP \u6570\u636e\u8fde\u63a5\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u5355\u4f4d\u4e3a\u79d2\u3002\u9ed8\u8ba4\u503c\u4e3a 120\u3002
idle_session_timeout=300
\u8bbe\u7f6e\u591a\u957f\u65f6\u95f4\u4e0d\u5bf9 FTP \u670d\u52a1\u5668\u8fdb\u884c\u4efb\u4f55\u64cd\u4f5c\uff0c\u5219\u65ad\u5f00\u8be5 FTP \u8fde\u63a5\uff0c\u5355\u4f4d\u4e3a\u79d2\u3002\u9ed8\u8ba4\u503c\u4e3a 300 \u3002

11.\u65e5\u5fd7\u6587\u4ef6\u8bbe\u7f6e<\/strong>
xferlog_enable= YES\/NO\uff08YES\uff09
\u662f\u5426\u542f\u7528\u4e0a\u4f20\/\u4e0b\u8f7d\u65e5\u5fd7\u8bb0\u5f55\u3002\u5982\u679c\u542f\u7528\uff0c\u5219\u4e0a\u4f20\u4e0e\u4e0b\u8f7d\u7684\u4fe1\u606f\u5c06\u88ab\u5b8c\u6574\u7eaa\u5f55\u5728 xferlog_file \u6240\u5b9a\u4e49\u7684\u6863\u6848\u4e2d\u3002\u9884\u8bbe\u4e3a\u5f00\u542f\u3002
xferlog_file=\/var\/log\/vsftpd.log
\u8bbe\u7f6e\u65e5\u5fd7\u6587\u4ef6\u540d\u548c\u8def\u5f84\uff0c\u9ed8\u8ba4\u503c\u4e3a\/var\/log\/vsftpd.log\u3002
xferlog_std_format=YES\/NO\uff08NO\uff09
\u5982\u679c\u542f\u7528\uff0c\u5219\u65e5\u5fd7\u6587\u4ef6\u5c06\u4f1a\u5199\u6210 xferlog \u7684\u6807\u51c6\u683c\u5f0f\uff0c\u5982\u540c wu-ftpd \u4e00\u822c\u3002\u9ed8\u8ba4\u503c\u4e3a\u5173\u95ed\u3002
log_ftp_protocol=YES|NO\uff08NO\uff09
\u5982\u679c\u542f\u7528\u6b64\u9009\u9879\uff0c\u6240\u6709\u7684 FTP \u8bf7\u6c42\u548c\u54cd\u5e94\u90fd\u4f1a\u88ab\u8bb0\u5f55\u5230\u65e5\u5fd7\u4e2d\uff0c\u9ed8\u8ba4\u65e5\u5fd7\u6587\u4ef6\u5728\/var\/log\/vsftpd.log\u3002\u542f\u7528\u6b64\u9009\u9879\u65f6\uff0cxferlog_std_format \u4e0d\u80fd\u88ab\u6fc0\u6d3b\u3002\u8fd9\u4e2a\u9009\u9879\u6709\u52a9\u4e8e\u8c03\u8bd5\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002

12.\u5b9a\u4e49\u7528\u6237\u914d\u7f6e\u6587\u4ef6<\/strong>
\u5728 vsftpd \u4e2d\uff0c\u53ef\u4ee5\u901a\u8fc7\u5b9a\u4e49\u7528\u6237\u914d\u7f6e\u6587\u4ef6\u6765\u5b9e\u73b0\u4e0d\u540c\u7684\u7528\u6237\u4f7f\u7528\u4e0d\u540c\u7684\u914d\u7f6e\u3002
user_config_dir=\/etc\/vsftpd\/userconf
\u8bbe\u7f6e\u7528\u6237\u914d\u7f6e\u6587\u4ef6\u6240\u5728\u7684\u76ee\u5f55\u3002\u5f53\u8bbe\u7f6e\u4e86\u8be5\u914d\u7f6e\u9879\u540e\uff0c\u7528\u6237\u767b\u9646\u670d\u52a1\u5668\u540e\uff0c\u7cfb\u7edf\u5c31\u4f1a\u5230\/etc\/vsftpd\/userconf \u76ee\u5f55\u4e0b\uff0c\u8bfb\u53d6\u4e0e\u5f53\u524d\u7528\u6237\u540d\u76f8\u540c\u7684\u6587\u4ef6\uff0c\u5e76\u6839\u636e\u6587\u4ef6\u4e2d\u7684\u914d\u7f6e\u547d\u4ee4\uff0c\u5bf9\u5f53\u524d\u7528\u6237\u8fdb\u884c\u66f4\u8fdb\u4e00\u6b65\u7684\u914d\u7f6e\u3002
\u4f8b\u5982\uff1a\u5b9a\u4e49 user_config_dir=\/etc\/vsftpd\/userconf\uff0c\u4e14\u4e3b\u673a\u4e0a\u6709\u4f7f\u7528\u8005test1,test2\uff0c\u90a3\u4e48\u6211\u4eec\u5c31\u5728 user_config_dir \u7684\u76ee\u5f55\u65b0\u589e\u6587\u4ef6\u540d\u4e3a test1 \u548c test2 \u4e24\u4e2a\u6587\u4ef6\u3002\u82e5\u662f test1 \u767b\u5165\uff0c\u5219\u4f1a\u8bfb\u53d6 user_config_dir \u4e0b\u7684 test1 \u8fd9\u4e2a\u6863\u6848\u5185\u7684\u8bbe\u5b9a\u3002\u9ed8\u8ba4\u503c\u4e3a\u65e0\u3002\u5229\u7528\u7528\u6237\u914d\u7f6e\u6587\u4ef6\uff0c\u53ef\u4ee5\u5b9e\u73b0\u5bf9\u4e0d\u540c\u7528\u6237\u8fdb\u884c\u8bbf\u95ee\u901f\u5ea6\u7684\u63a7\u5236\uff0c\u5728\u5404\u7528\u6237\u914d\u7f6e\u6587\u4ef6\u4e2d\u5b9a\u4e49 local_max_rate=XX\uff0c\u5373\u53ef\u3002

13.FTP \u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e\u7aef\u53e3\u8bbe\u7f6e<\/strong>
FTP \u6709\u4e24\u79cd\u5de5\u4f5c\u65b9\u5f0f\uff1aPORT FTP\uff08\u4e3b\u52a8\u6a21\u5f0f\uff09\u548c PASV FTP\uff08\u88ab\u52a8\u6a21\u5f0f\uff09
listen_port=21
\u8bbe\u7f6e FTP \u670d\u52a1\u5668\u5efa\u7acb\u8fde\u63a5\u6240\u76d1\u542c\u7684\u7aef\u53e3\uff0c\u9ed8\u8ba4\u503c\u4e3a 21\u3002
connect_from_port_20=YES\/NO
\u6307\u5b9a FTP \u4f7f\u7528 20 \u7aef\u53e3\u8fdb\u884c\u6570\u636e\u4f20\u8f93\uff0c\u9ed8\u8ba4\u503c\u4e3a YES\u3002
ftp_data_port=20
\u8bbe\u7f6e\u5728 PORT \u65b9\u5f0f\u4e0b\uff0cFTP \u6570\u636e\u8fde\u63a5\u4f7f\u7528\u7684\u7aef\u53e3\uff0c\u9ed8\u8ba4\u503c\u4e3a 20\u3002
pasv_enable=YES\/NO\uff08YES\uff09
\u82e5\u8bbe\u7f6e\u4e3a YES\uff0c\u5219\u4f7f\u7528 PASV \u5de5\u4f5c\u6a21\u5f0f\uff1b\u82e5\u8bbe\u7f6e\u4e3a NO\uff0c\u5219\u4f7f\u7528 PORT \u6a21\u5f0f\u3002\u9ed8\u8ba4\u503c\u4e3a YES\uff0c\u5373\u4f7f\u7528 PASV \u5de5\u4f5c\u6a21\u5f0f\u3002
pasv_max_port=0
\u5728 PASV \u5de5\u4f5c\u6a21\u5f0f\u4e0b\uff0c\u6570\u636e\u8fde\u63a5\u53ef\u4ee5\u4f7f\u7528\u7684\u7aef\u53e3\u8303\u56f4\u7684\u6700\u5927\u7aef\u53e3\uff0c0 \u8868\u793a\u4efb\u610f\u7aef\u53e3\u3002\u9ed8\u8ba4\u503c\u4e3a0\u3002
pasv_min_port=0
\u5728 PASV \u5de5\u4f5c\u6a21\u5f0f\u4e0b\uff0c\u6570\u636e\u8fde\u63a5\u53ef\u4ee5\u4f7f\u7528\u7684\u7aef\u53e3\u8303\u56f4\u7684\u6700\u5c0f\u7aef\u53e3\uff0c0 \u8868\u793a\u4efb\u610f\u7aef\u53e3\u3002\u9ed8\u8ba4\u503c\u4e3a0\u3002

14.\u4e0e\u8fde\u63a5\u76f8\u5173\u7684\u8bbe\u7f6e<\/strong>
listen=YES\/NO\uff08YES\uff09
\u8bbe\u7f6e vsftpd \u670d\u52a1\u5668\u662f\u5426\u4ee5 standalone \u6a21\u5f0f\u8fd0\u884c\u3002\u4ee5 standalone \u6a21\u5f0f\u8fd0\u884c\u662f\u4e00\u79cd\u8f83\u597d\u7684\u65b9\u5f0f\uff0c\u6b64\u65f6 listen \u5fc5\u987b\u8bbe\u7f6e\u4e3a YES\uff0c\u6b64\u4e3a\u9ed8\u8ba4\u503c\u3002\u5efa\u8bae\u4e0d\u8981\u66f4\u6539\uff0c\u6709\u5f88\u591a\u4e0e\u670d\u52a1\u5668\u8fd0\u884c\u76f8\u5173\u7684\u914d\u7f6e\u547d\u4ee4\uff0c\u9700\u8981\u5728\u6b64\u6a21\u5f0f\u4e0b\u624d\u6709\u6548\u3002\u82e5\u8bbe\u7f6e\u4e3a NO\uff0c\u5219 vsftpd \u4e0d\u662f\u4ee5\u72ec\u7acb\u7684\u670d\u52a1\u8fd0\u884c\uff0c\u8981\u53d7\u5230 xinetd\u670d\u52a1\u7684\u7ba1\u63a7\uff0c\u529f\u80fd\u4e0a\u4f1a\u53d7\u5230\u9650\u5236\u3002
max_clients=0
\u8bbe\u7f6e vsftpd \u5141\u8bb8\u7684\u6700\u5927\u8fde\u63a5\u6570\uff0c\u9ed8\u8ba4\u503c\u4e3a 0\uff0c\u8868\u793a\u4e0d\u53d7\u9650\u5236\u3002\u82e5\u8bbe\u7f6e\u4e3a 100 \u65f6\uff0c\u5219\u540c\u65f6\u5141\u8bb8\u6709 100 \u4e2a\u8fde\u63a5\uff0c\u8d85\u51fa\u7684\u5c06\u88ab\u62d2\u7edd\u3002\u53ea\u6709\u5728 standalone \u6a21\u5f0f\u8fd0\u884c\u624d\u6709\u6548\u3002
max_per_ip=0
\u8bbe\u7f6e\u6bcf\u4e2a IP \u5141\u8bb8\u4e0e FTP \u670d\u52a1\u5668\u540c\u65f6\u5efa\u7acb\u8fde\u63a5\u7684\u6570\u76ee\u3002\u9ed8\u8ba4\u503c\u4e3a 0\uff0c\u8868\u793a\u4e0d\u53d7\u9650\u5236\u3002\u53ea\u6709\u5728 standalone \u6a21\u5f0f\u8fd0\u884c\u624d\u6709\u6548\u3002
listen_address=IP \u5730\u5740
\u8bbe\u7f6e FTP \u670d\u52a1\u5668\u5728\u6307\u5b9a\u7684 IP \u5730\u5740\u4e0a\u4fa6\u542c\u7528\u6237\u7684 FTP \u8bf7\u6c42\u3002\u82e5\u4e0d\u8bbe\u7f6e\uff0c\u5219\u5bf9\u670d\u52a1\u5668\u7ed1\u5b9a\u7684\u6240\u6709IP \u5730\u5740\u8fdb\u884c\u4fa6\u542c\u3002\u53ea\u6709\u5728 standalone \u6a21\u5f0f\u8fd0\u884c\u624d\u6709\u6548\u3002
setproctitle_enable=YES\/NO\uff08NO\uff09
\u8bbe\u7f6e\u6bcf\u4e2a\u4e0e FTP \u670d\u52a1\u5668\u7684\u8fde\u63a5\uff0c\u662f\u5426\u4ee5\u4e0d\u540c\u7684\u8fdb\u7a0b\u8868\u73b0\u51fa\u6765\u3002\u9ed8\u8ba4\u503c\u4e3a NO\uff0c\u6b64\u65f6\u4f7f\u7528 ps aux|grep ftp \u53ea\u4f1a\u6709\u4e00\u4e2a vsftpd \u7684\u8fdb\u7a0b\u3002\u82e5\u8bbe\u7f6e\u4e3a YES\uff0c\u5219\u6bcf\u4e2a\u8fde\u63a5\u90fd\u4f1a\u6709\u4e00\u4e2a vsftpd \u7684\u8fdb\u7a0b\u3002

15.\u865a\u62df\u7528\u6237\u8bbe\u7f6e<\/strong>
\u865a\u62df\u7528\u6237\u4f7f\u7528 PAM \u8ba4\u8bc1\u65b9\u5f0f\u3002
pam_service_name=vsftpd
\u8bbe\u7f6e PAM \u4f7f\u7528\u7684\u540d\u79f0\uff0c\u9ed8\u8ba4\u503c\u4e3a\/etc\/pam.d\/vsftpd\u3002
guest_enable= YES\/NO\uff08NO\uff09
\u542f\u7528\u865a\u62df\u7528\u6237\u3002\u9ed8\u8ba4\u503c\u4e3a NO\u3002
guest_username=ftp
\u8fd9\u91cc\u7528\u6765\u6620\u5c04\u865a\u62df\u7528\u6237\u3002\u9ed8\u8ba4\u503c\u4e3a ftp\u3002
virtual_use_local_privs=YES\/NO\uff08NO\uff09
\u5f53\u8be5\u53c2\u6570\u6fc0\u6d3b\uff08YES\uff09\u65f6\uff0c\u865a\u62df\u7528\u6237\u4f7f\u7528\u4e0e\u672c\u5730\u7528\u6237\u76f8\u540c\u7684\u6743\u9650\u3002\u5f53\u6b64\u53c2\u6570\u5173\u95ed\uff08NO\uff09\u65f6\uff0c\u865a\u62df\u7528\u6237\u4f7f\u7528\u4e0e\u533f\u540d\u7528\u6237\u76f8\u540c\u7684\u6743\u9650\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u6b64\u53c2\u6570\u662f\u5173\u95ed\u7684\uff08NO\uff09\u3002

16.\u5176\u4ed6\u8bbe\u7f6e<\/strong>
text_userdb_names= YES\/NO\uff08NO\uff09
\u8bbe\u7f6e\u5728\u6267\u884c ls \u2013la \u4e4b\u7c7b\u7684\u547d\u4ee4\u65f6\uff0c\u662f\u663e\u793a UID\u3001GID \u8fd8\u662f\u663e\u793a\u51fa\u5177\u4f53\u7684\u7528\u6237\u540d\u548c\u7ec4\u540d\u3002\u9ed8\u8ba4\u503c\u4e3a NO\uff0c\u5373\u4ee5 UID \u548c GID \u65b9\u5f0f\u663e\u793a\u3002\u82e5\u5e0c\u671b\u663e\u793a\u7528\u6237\u540d\u548c\u7ec4\u540d\uff0c\u5219\u8bbe\u7f6e\u4e3a YES\u3002
ls_recurse_enable=YES\/NO\uff08NO\uff09
\u82e5\u662f\u542f\u7528\u6b64\u529f\u80fd\uff0c\u5219\u5141\u8bb8\u767b\u5165\u8005\u4f7f\u7528 ls \u2013R\uff08\u53ef\u4ee5\u67e5\u770b\u5f53\u524d\u76ee\u5f55\u4e0b\u5b50\u76ee\u5f55\u4e2d\u7684\u6587\u4ef6\uff09\u8fd9\u4e2a\u6307\u4ee4\u3002
\u9ed8\u8ba4\u503c\u4e3a NO\u3002
hide_ids=YES\/NO\uff08NO\uff09
\u5982\u679c\u542f\u7528\u6b64\u529f\u80fd\uff0c\u6240\u6709\u6863\u6848\u7684\u62e5\u6709\u8005\u4e0e\u7fa4\u7ec4\u90fd\u4e3a ftp\uff0c\u4e5f\u5c31\u662f\u4f7f\u7528\u8005\u767b\u5165\u4f7f\u7528 ls -al \u4e4b\u7c7b\u7684\u6307\u4ee4\uff0c\u6240\u770b\u5230\u7684\u6863\u6848\u62e5\u6709\u8005\u8ddf\u7fa4\u7ec4\u5747\u4e3a ftp\u3002\u9ed8\u8ba4\u503c\u4e3a\u5173\u95ed\u3002
download_enable=YES\/NO\uff08YES\uff09
\u5982\u679c\u8bbe\u7f6e\u4e3a NO\uff0c\u6240\u6709\u7684\u6587\u4ef6\u90fd\u4e0d\u80fd\u4e0b\u8f7d\u5230\u672c\u5730\uff0c\u6587\u4ef6\u5939\u4e0d\u53d7\u5f71\u54cd\u3002\u9ed8\u8ba4\u503c\u4e3a YES\u3002

\uff083\uff09\u91cd\u542f vsftpd \u670d\u52a1<\/strong>
\u4fee\u6539\u914d\u7f6e\u6587\u4ef6
vim \/etc\/vsftpd.conf
pam_service_name=ftp #uos \u64cd\u4f5c\u7cfb\u7edf\u7528\u6237\u9700\u8981\u66f4\u6539\u6210 ftp
\u91cd\u542f\u670d\u52a1\u5e76\u52a0\u5165\u5f00\u673a\u81ea\u542f
systemctl restart vsftpd
systemctl enable vsftpd<\/code>

\uff084\uff09\u521b\u5efa ftp \u7528\u6237\u53ca\u8be5\u7528\u6237\u7684 ftp \u76ee\u5f55<\/strong>
mkdir \/home\/uosftp
useradd -d \/home\/uosftp uosftp
passwd uosftp
mkdir \/home\/uosftp\/ftp
chmod 777 -R \/home\/uosftp\/ftp
usermod -s \/sbin\/nologin uosftp<\/code>

\uff085\uff09\u767b\u5f55 ftp \u7684\u65b9\u5f0f<\/strong>
1\u3001\u672c\u673a\u9a8c\u8bc1
\u5728 uos1 \u4e0a
\u5b89\u88c5 lftp \u547d\u4ee4\uff0capt-get install lftp
lftp uosftp@127.0.0.1
\u5bc6\u7801:
lftp \u7528\u6237\u540d@ftp \u670d\u52a1\u5668 ip
2\u3001\u5ba2\u6237\u7aef\u9a8c\u8bc1
\u5728 uos2 \u4e0a
\u5ba2\u6237\u7aef\u5b89\u88c5\u767b\u9646
apt -y install lftp ftp
ftp windows linux unix \u90fd\u80fd\u7528
lftp linux \u4e13\u7528\uff0c\u652f\u6301 tab \u8865\u5168
\u5ba2\u6237\u7aef\u767b\u9646 ftp \u670d\u52a1\u5668
lftp uosftp@192.168.200.201
\u53e3\u4ee4:
lftp uosftp@192.168.200.201:~> ls
drwxrwxrwx 2 0 0 4096 Jun 08 21:30 ftp

\uff086\uff09\u62d2\u7edd\u7528\u6237\u7528 email \u65b9\u5f0f\u8fde\u63a5 ftp<\/strong>
\u6709\u6548\u7684\u9632\u6b62\u533f\u540d\u7528\u6237\u901a\u8fc7 email \u65b9\u5f0f\u8fde\u63a5
vim \/etc\/vsftpd.conf #\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u53bb\u6389\u6ce8\u91ca
deny_email_enable=YES # (default follows)
banned_email_file=\/etc\/vsftpd\/banned_emails<\/p>\n\n\n\n

\u4e09\u3001ftp \u914d\u7f6e\u5b9e\u6218<\/h2>\n\n\n\n

\uff081\uff09\u533f\u540d\u7528\u6237\u4e0b\u8f7d<\/strong>
\u5728 uos1 \u4e0a
apt install -y vsftpd
vim \/etc\/vsftpd.conf #\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u5141\u8bb8\u533f\u540d\u8bbf\u95ee
anonymous_enable=YES
\u91cd\u542f vsftpd \u670d\u52a1
systemctl restart vsftpd
touch \/srv\/ftp\/test.txt #\u521b\u5efa\u6d4b\u8bd5\u6587\u4ef6
\u533f\u540d\u7528\u6237\u767b\u5f55\u4e0a\u6765\u7684\u4f4d\u7f6e\uff0c\u4f7f\u7528\u9ed8\u8ba4\u4f4d\u7f6e\uff1a\/srv\/ftp

\u5728 uos2 \u4e0a
ftp 192.168.200.201 #\u767b\u5f55 ftp
Name (192.168.200.201:root): ftp
Password: \/\/\u76f4\u63a5\u56de\u8f66
ftp> ls
200 PORT command successful. Consider using PASV. 150 Here comes the directory listing. -rw-r–r– 1 0 0 0 Jun 08 21:42 test.txt #\u53ef\u4ee5\u770b\u5230\u6d4b\u8bd5\u6587\u4ef6
ftp> get test.txt #\u4e0b\u8f7d\u6587\u4ef6\u5230\u6839\u4e0b

\uff082\uff09\u533f\u540d\u7528\u6237\u4e0a\u4f20<\/strong>
\u5728 uos1 \u4e0a\u9762
vim \/etc\/vsftpd.conf
anonymous_enable=YES
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
systemctl restart vsftpd
mkdir \/srv\/ftp\/pub #\u521b\u5efa\u4e0a\u4f20\u76ee\u5f55
chmod 777 \/srv\/ftp\/pub #\u66f4\u6539\u6743\u9650
chown ftp:ftp \/srv\/ftp\/pub\/

\u5728 uos2 \u4e0a
touch 1.sh #\u521b\u5efa\u4e0a\u4f20\u6587\u4ef6
ftp 192.168.200.201
Name (192.168.200.201:root): ftp
Password:
ftp> cd pub
ftp> put 1.sh #\u4e0a\u4f20\u6587\u4ef6

\uff083\uff09\u7528\u6237\u8bbf\u95ee<\/strong>
\u5728 uos1 \u4e0a
\u521b\u5efa\u6d4b\u8bd5\u7528\u6237
useradd -m -s \/bin\/bash user1
useradd -m -s \/bin\/bash user2
echo \\”user1:123456\\” |chpasswd
echo \\”user2:123456\\” |chpasswd
vim \/etc\/vsftpd.conf #\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u4ee5\u4e0b\u9009\u9879
anonymous_enable=NO
\u5207\u8bb0\u5c06\u4ee5\u4e0b\u914d\u7f6e\u6587\u4ef6\u5185\u5bb9\u6ce8\u91ca\u6389
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=\/etc\/vsftpd\/chroot_list
systemctl restart vsftpd

\u5728 uos2 \u4e0a
\u767b\u5f55\u6d4b\u8bd5
ftp 192.168.200.201
Name (192.168.200.201:root): user1
Password:
ftp> put 1.sh
ftp> ls

\uff084\uff09\u9501\u5b9a\u7528\u6237\u767b\u5f55\u76ee\u5f55<\/strong>
\u5728 uos1 \u4e0a
useradd uosftp1 -g uosftp -d \/home\/uosftp
useradd uosftp2 -g uosftp -d \/home\/uosftp
passwd uosftp1
passwd uosftp2
chmod 777 -R \/home\/uosftp\/ftp
usermod -s \/sbin\/nologin uosftp1
usermod -s \/sbin\/nologin uosftp2
touch \/etc\/vsftpd.chroot_list
vim \/etc\/vsftpd.conf
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=\/etc\/vsftpd.chroot_list
echo uosftp1 > \/etc\/vsftpd.chroot_list
systemctl restart vsftpd<\/code>
\u5ba2\u6237\u7aef\u6d4b\u8bd5\u524d\u6700\u540e\u5f7b\u5e95\u9000\u51fa\u91cd\u8fde\u4e00\u6b21\uff0c\u4f7f\u7528 uosftp2 \u767b\u5f55\u5c06\u88ab\u9501\u5b9a\u76ee\u5f55\uff0cuosftp1 \u4e0d\u88ab\u9501\u5b9a

\uff085\uff09\u9650\u5236\u7528\u6237\u767b\u5f55<\/strong>
\u5728 uos1 \u4e0a
cat \/etc\/pam.d\/vsftpd #\u663e\u793a\/etc\/ftpusers \u4e2d\u7684\u7528\u6237\u4f1a\u88ab pam \u6a21\u5757 deny
echo user1 >> \/etc\/ftpusers #\u65e0\u9700\u91cd\u542f\u670d\u52a1\uff0cpam \u7acb\u5373\u751f\u6548\uff0cuser1 \u5728\u4efb\u4f55\u5ba2\u6237\u7aef\u90fd\u4e0d\u80fd\u767b\u5f55
echo user2 >> \/etc\/vsftpd.user_list #\u6ca1\u6709\u6b64\u6587\u4ef6\u5c31\u521b\u5efa
vim \/etc\/vsftpd.conf #\u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9
userlist_enable=YES
userlist_deny=NO
\u5982\u679c userlist_deny=NO\uff0c\u5219\u53ea\u6709\/etc\/vsftpd.user_list \u4e2d\u7684\u7528\u6237\u53ef\u4ee5\u767b\u5f55
systemctl restart vsftpd
\u5ba2\u6237\u7aef\u4e0a user2 \u5c06\u4e0d\u80fd\u767b\u5f55<\/span>

vim \/etc\/vsftpd\/vsftpd.conf
userlist_deny=YES #\u4fee\u6539
systemctl restart vsftpd
\u5ba2\u6237\u7aef\u53ea\u6709 user2 \u53ef\u4ee5\u767b\u5f55<\/span>

echo “vsftpd:192.168.200.202” >> \/etc\/hosts.deny
vim \/etc\/vsftpd.conf
tcp_wrappers=YES
systemctl restart vsftpd
uos2 \u4e0a\u6240\u6709\u7528\u6237\u90fd\u4e0d\u80fd\u767b\u5f55\uff0c\u5176\u4ed6\u4e3b\u673a\u7684\u5ba2\u6237\u7aef\u53ef\u4ee5\u767b\u5f55<\/span><\/p>\n\n\n\n

\uff086\uff09\u865a\u62df\u7528\u6237<\/strong>
mkdir \/home\/vmftp
useradd vmftp -d \/home\/vmftp -s \/bin\/false #\u5efa\u7acb\u865a\u62df\u7528\u6237\u5bf9\u5e94\u7684\u7cfb\u7edf\u7528\u6237 vmftp
chown vmftp:vmftp \/home\/vmftp #\u6388\u6743\u5c5e\u4e3b\u548c\u5c5e\u7ec4\u90fd\u662f vmftp<\/code>
\u5728\/home\/vmftp \u76ee\u5f55\u4e0b\u5efa\u7acb 3 \u4e2a\u5b50\u76ee\u5f55,\u5206\u522b\u4e3a\uff1a
uos1
uos2
uos3<\/span>
\u521b\u5efa\u865a\u62df\u8d26\u6237\u548c\u5bc6\u7801\u7684\u6587\u672c\u6587\u4ef6,\u5947\u6570\u884c\u4e3a\u8d26\u6237\u540d\u3001\u5076\u6570\u884c\u4e3a\u5bc6\u7801\uff0c\u591a\u4e2a\u7528\u6237\u5c31\u5199\u591a\u7ec4\uff0c\u4e2d\u95f4\u4e0d\u80fd\u6709\u7a7a\u884c\u548c\u7a7a\u683c
vim \/etc\/loguser.txt
vmftp1
vmftp1
vmftp2
vmftp2
vmftp3
vmftp3<\/span><\/sub>
\u751f\u6210\u6570\u636e\u5e93
apt inatall db5.3-util<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

\u4e00\u3001\u5173\u4e8eFTP FTP \u662f File Transfer Protocol\uff08\u6587\u4ef6\u4f20\u8f93\u534f\u8bae\uff09\u7684\u82f1\u6587\u7b80\u79f0\uff0c\u800c\u4e2d\u6587\u7b80\u79f0 […]<\/p>\n","protected":false},"author":1,"featured_media":3169,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[115,142,141],"class_list":["post-3153","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-2","tag-uos","tag-vsftp","tag-141"],"_links":{"self":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts\/3153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3153"}],"version-history":[{"count":1,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts\/3153\/revisions"}],"predecessor-version":[{"id":3273,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts\/3153\/revisions\/3273"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/media\/3169"}],"wp:attachment":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}