{"id":3040,"date":"2018-01-16T22:24:52","date_gmt":"2018-01-16T14:24:52","guid":{"rendered":"http:\/\/cn.hostease.com\/xueyuan\/?p=3040"},"modified":"2018-01-16T22:24:52","modified_gmt":"2018-01-16T14:24:52","slug":"centos-7-x%e6%90%ad%e5%bb%baftp","status":"publish","type":"post","link":"https:\/\/cn.hostease.com\/xueyuan\/hemanual\/centos-7-x%e6%90%ad%e5%bb%baftp\/","title":{"rendered":"CentOS 7.x\u642d\u5efaFTP"},"content":{"rendered":"
1. \u5b89\u88c5vsftpd<\/div>\n
<\/div>\n
#\u5b89\u88c5vsftpd<\/div>\n
yum install -y vsftpd<\/div>\n
#\u8bbe\u7f6e\u5f00\u673a\u542f\u52a8<\/div>\n
systemctl enable vsftpd.service<\/div>\n
# \u91cd\u542f<\/div>\n
service vsftpd restart<\/div>\n
# \u67e5\u770bvsftpd\u670d\u52a1\u7684\u72b6\u6001<\/div>\n
systemctl status vsftpd.service<\/div>\n
2. \u914d\u7f6evsftpd.conf<\/div>\n
<\/div>\n
#\u5907\u4efd\u914d\u7f6e\u6587\u4ef6<\/div>\n
cp \/etc\/vsftpd\/vsftpd.conf \/etc\/vsftpd\/vsftpd.conf.bak<\/div>\n
<\/div>\n
#\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4<\/div>\n
sed -i “s\/anonymous_enable=YES\/anonymous_enable=NO\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#anon_upload_enable=YES\/anon_upload_enable=NO\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#anon_mkdir_write_enable=YES\/anon_mkdir_write_enable=YES\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#chown_uploads=YES\/chown_uploads=NO\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#async_abor_enable=YES\/async_abor_enable=YES\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#ascii_upload_enable=YES\/ascii_upload_enable=YES\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#ascii_download_enable=YES\/ascii_download_enable=YES\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
<\/div>\n
sed -i “s\/#ftpd_banner=Welcome to blah FTP service.\/ftpd_banner=Welcome to FTP service.\/g” ‘\/etc\/vsftpd\/vsftpd.conf’<\/div>\n
#\u6dfb\u52a0\u4e0b\u5217\u5185\u5bb9\u5230vsftpd.conf\u672b\u5c3e<\/div>\n
vi \/etc\/vsftpd\/vsftpd.conf \/etc\/vsftpd\/vsftpd.conf<\/div>\n
use_localtime=YES<\/div>\n
listen_port=21<\/div>\n
chroot_local_user=YES<\/div>\n
idle_session_timeout=300<\/div>\n
guest_enable=YES<\/div>\n
guest_username=vsftpd<\/div>\n
user_config_dir=\/etc\/vsftpd\/vconf<\/div>\n
data_connection_timeout=1<\/div>\n
virtual_use_local_privs=YES<\/div>\n
pasv_enable=YES<\/div>\n
pasv_min_port=10060<\/div>\n
pasv_max_port=10070<\/div>\n
accept_timeout=5<\/div>\n
connect_timeout=1<\/div>\n
allow_writeable_chroot=YES<\/div>\n
3. \u5efa\u7acb\u7528\u6237\u6587\u4ef6<\/div>\n
<\/div>\n
#\u7b2c\u4e00\u884c\u7528\u6237\u540d\uff0c\u7b2c\u4e8c\u884c\u5bc6\u7801\uff0c\u4e0d\u80fd\u4f7f\u7528root\u4e3a\u7528\u6237\u540d(\u5947\u6570\u884c\u7528\u6237\u540d\uff0c\u5076\u6570\u884c\u5bc6\u7801,\u8fd9\u91cc\u7528\u6237\u540d\u662ftest\uff0c\u5bc6\u7801\u4e3a123456)<\/div>\n
vi \/etc\/vsftpd\/virtusers<\/div>\n
test<\/div>\n
123456<\/div>\n
4. \u751f\u6210\u7528\u6237\u6570\u636e\u6587\u4ef6<\/div>\n
<\/div>\n
db_load -T -t hash -f \/etc\/vsftpd\/virtusers \/etc\/vsftpd\/virtusers.db<\/div>\n
<\/div>\n
#\u8bbe\u5b9aPAM\u9a8c\u8bc1\u6587\u4ef6\uff0c\u5e76\u6307\u5b9a\u5bf9\u865a\u62df\u7528\u6237\u6570\u636e\u5e93\u6587\u4ef6\u8fdb\u884c\u8bfb\u53d6<\/div>\n
<\/div>\n
chmod 600 \/etc\/vsftpd\/virtusers.db<\/div>\n
5. \u4fee\u6539\/etc\/pam.d\/vsftpd\u6587\u4ef6<\/div>\n
<\/div>\n
# \u4fee\u6539\u524d\u5148\u5907\u4efd<\/div>\n
<\/div>\n
cp \/etc\/pam.d\/vsftpd \/etc\/pam.d\/vsftpd.bak<\/div>\n
<\/div>\n
# \u5c06auth\u53caaccount\u7684\u6240\u6709\u914d\u7f6e\u884c\u5747\u6ce8\u91ca\u6389(\u6bcf\u884c\u524d\u9762\u52a0 #\u00a0 )<\/div>\n
vi \/etc\/pam.d\/vsftpd<\/div>\n
<\/div>\n
auth sufficient \/lib64\/security\/pam_userdb.so db=\/etc\/vsftpd\/virtusers<\/div>\n
account sufficient \/lib64\/security\/pam_userdb.so db=\/etc\/vsftpd\/virtusers<\/div>\n
# \u5982\u679c\u7cfb\u7edf\u4e3a32\u4f4d\uff0c\u4e0a\u9762\u6539\u4e3alib<\/div>\n
6. \u65b0\u5efa\u7cfb\u7edf\u7528\u6237vsftpd\uff0c\u7528\u6237\u76ee\u5f55\u4e3a\/home\/vsftpd<\/div>\n
<\/div>\n
#\u7528\u6237\u767b\u5f55\u7ec8\u7aef\u8bbe\u4e3a\/bin\/false(\u5373\uff1a\u4f7f\u4e4b\u4e0d\u80fd\u767b\u5f55\u7cfb\u7edf)<\/div>\n
useradd vsftpd -d \/home\/vsftpd -s \/bin\/false<\/div>\n
chown -R vsftpd:vsftpd \/home\/vsftpd<\/div>\n
7.\u5efa\u7acb\u865a\u62df\u7528\u6237\u4e2a\u4eba\u914d\u7f6e\u6587\u4ef6<\/div>\n
<\/div>\n
mkdir \/etc\/vsftpd\/vconf<\/div>\n
cd \/etc\/vsftpd\/vconf<\/div>\n
<\/div>\n
#\u8fd9\u91cc\u5efa\u7acbtest\u865a\u62df\u7528\u6237\u914d\u5408\u6587\u4ef6<\/div>\n
touch test<\/div>\n
<\/div>\n
#\u5efa\u7acb\u7528\u6237\u6839\u76ee\u5f55<\/div>\n
mkdir -p \/home\/vsftpd\/test\/<\/div>\n
#\u66f4\u6539\u7528\u6237\u76ee\u5f55\u6743\u9650<\/div>\n
sudo chmod -R 777 \/home\/vsftpd\/test<\/div>\n
<\/div>\n
#\u7f16\u8f91chris\u7528\u6237\u914d\u7f6e\u6587\u4ef6\uff0c\u5185\u5bb9\u5982\u4e0b\uff0c\u5176\u4ed6\u7528\u6237\u7c7b\u4f3c<\/div>\n
vi test<\/div>\n
<\/div>\n
local_root=\/home\/vsftpd\/test\/<\/div>\n
write_enable=YES<\/div>\n
anon_world_readable_only=NO<\/div>\n
anon_upload_enable=YES<\/div>\n
anon_mkdir_write_enable=YES<\/div>\n
anon_other_write_enable=YES<\/div>\n
8. \u9632\u706b\u5899\u8bbe\u7f6e<\/div>\n
<\/div>\n
vi \/etc\/sysconfig\/iptables<\/div>\n
#\u7f16\u8f91iptables\u6587\u4ef6\uff0c\u6dfb\u52a0\u5982\u4e0b\u5185\u5bb9\uff0c\u5f00\u653e21,10060-10070\u7aef\u53e3<\/div>\n
-A INPUT -m state –state NEW -m tcp -p tcp –dport 21 -j ACCEPT<\/div>\n
-A INPUT -p tcp –dport 10060:10070 -j ACCEPT<\/div>\n
9. \u91cd\u542fvsftpd\u670d\u52a1\u5668<\/div>\n
<\/div>\n
service vsftpd restart<\/div>\n
10.\u4f7f\u7528ftp\u8f6f\u4ef6\u8fde\u63a5\u6d4b\u8bd5<\/div>\n
<\/div>\n
\u00a0 \u00a0 \u00a0 \u53ea\u9700\u586b\u5199\u670d\u52a1\u5668ip\uff0cftp\u5e10\u53f7\u5bc6\u7801\uff0c\u4e0d\u7528\u586b\u7aef\u53e3<\/div>\n
<\/div>\n
\u6ce8\u610f\uff1a\u963f\u91cc\u670d\u52a1\u5668\u9700\u8981\u5728\u5b89\u5168\u7ec4\u89c4\u5219\u4e2d\u5c0610060\/10070\u7aef\u53e3\uff0c21\/22\u7aef\u53e3\u52a0\u5165\u767d\u540d\u5355\uff0c\u4e0d\u5f00\u653e\u7aef\u53e3shell\u90fd\u8fde\u4e0d\u4e0a\u3002<\/div>\n
<\/div>\n
\u53c2\u8003\u5730\u5740\uff1ahttps:\/\/blog.csdn.net\/the_victory\/article\/details\/52192085\u00a0 \u539f\u6587\u6709\u5199\u5c0f\u95ee\u9898\uff0c\u6211\u505a\u4e86\u4fee\u6539<\/div>\n","protected":false},"excerpt":{"rendered":"

1. \u5b89\u88c5vsftpd #\u5b89\u88c5vsftpd yum install -y vsftpd #\u8bbe\u7f6e\u5f00\u673a\u542f\u52a8 sys … \u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3,49,5],"tags":[495,277],"class_list":["post-3040","post","type-post","status-publish","format-standard","hentry","category-hemanual","category-linux","category-jishu","tag-centos7-x","tag-ftp"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/3040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/comments?post=3040"}],"version-history":[{"count":1,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/3040\/revisions"}],"predecessor-version":[{"id":3041,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/3040\/revisions\/3041"}],"wp:attachment":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/media?parent=3040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/categories?post=3040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/tags?post=3040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}