linux-FTP

1.ftp : //    文件的传输协议

2.ftp 协议提供的软件

在rhel7.2中

vsftpd

修改配置  vim  /etc/sysconfig/selinux

                vim  /etc/yum.repos.d/rhel_dvd.repo

<a href="https://s1.51cto.com/oss/201711/08/fecfc0139d18e0b1691583f485e86c32.png-wh_500x0-wm_3-wmp_4-s_2726641343.png" target="_blank"></a>

测试  在浏览器中输入可查看

<a href="https://s3.51cto.com/oss/201711/08/322b336e4bf6004148728452a08d6361.png-wh_500x0-wm_3-wmp_4-s_1695413288.png" target="_blank"></a>

3.部署ftp服务

如下图

<a href="https://s4.51cto.com/oss/201711/08/4426d0042cbc369d13004f2ed922efc9.png-wh_500x0-wm_3-wmp_4-s_213734227.png" target="_blank"></a>

<a href="https://s5.51cto.com/oss/201711/08/2c4b3e456aad98e4855ba8a5768d3083.png-wh_500x0-wm_3-wmp_4-s_3817818668.png" target="_blank"></a>

<a href="https://s2.51cto.com/oss/201711/08/caaa601c159ab6fbbc368bec6fcd578d.png-wh_500x0-wm_3-wmp_4-s_579968005.png" target="_blank"></a>

systemctl enable vsftpd   开机开启

lftp ip      能登陆并且显示，表示安装成功

<a href="https://s5.51cto.com/oss/201711/08/7d0a9ed71be302a21383042c572710eb.png-wh_500x0-wm_3-wmp_4-s_1914210224.png" target="_blank"></a>

4、ftp服务的基本信息

vsftpd            软件安装包 

21 /tcp           协议接口

<a href="https://s1.51cto.com/oss/201711/08/68dd42eeed0d2c74dbedadc1fec1a090.png-wh_500x0-wm_3-wmp_4-s_3304724297.png" target="_blank"></a>

/var/ftp           默认发布目录

/etc/vsftpd      配置目录

<a href="https://s4.51cto.com/oss/201711/08/24ebbfe10936aab6fcf0d262413617e3.png-wh_500x0-wm_3-wmp_4-s_3092908968.png" target="_blank"></a>

<a href="https://s1.51cto.com/oss/201711/08/55ec85a62c006b2e31b47d7603e72b18.png-wh_500x0-wm_3-wmp_4-s_2613321353.png" target="_blank"></a>

5.vsftpd服务的配置参数

1）匿名用户设定

anonymous_enable=YES|NO  ##匿名用户登陆限制

<a href="https://s4.51cto.com/oss/201711/08/478fc27b8162ece5ae56bc4497c1f6ef.png-wh_500x0-wm_3-wmp_4-s_2092902850.png" target="_blank"></a>

<a href="https://s3.51cto.com/oss/201711/08/2dee89871f764003ca39b006b4b1f55f.png-wh_500x0-wm_3-wmp_4-s_2198916078.png" target="_blank"></a>

<a href="https://s4.51cto.com/oss/201711/08/3225642b092e83aa12079e25109f7777.png-wh_500x0-wm_3-wmp_4-s_350902508.png" target="_blank"></a>

<a href="https://s4.51cto.com/oss/201711/08/51dcc748eaeddff2ab2e360fb5d09a77.png-wh_500x0-wm_3-wmp_4-s_3472704468.png" target="_blank"></a>

匿名用户上传

vim /etc/vsftpd/vsftpd.conf

anon_upload_enable=YES

chgrp ftp /var/ftp/pub

chmod 775 /var/ftp/pub

<a href="https://s3.51cto.com/oss/201711/08/32c2793ef88723d5f1b6c2fd522cd465.png-wh_500x0-wm_3-wmp_4-s_1838784974.png" target="_blank"></a>

<a href="https://s3.51cto.com/oss/201711/08/784b914fa42d26c067df3457643eeb52.png-wh_500x0-wm_3-wmp_4-s_342561067.png" target="_blank"></a>

write_enable=NO

<a href="https://s2.51cto.com/oss/201711/08/b1dfb05cb7a69d2a217669071c0a8e7c.png-wh_500x0-wm_3-wmp_4-s_3388871852.png" target="_blank"></a>

匿名用户家目录修改

anon_root=/direcotry

<a href="https://s3.51cto.com/oss/201711/08/72bcbd3e02500d09c2f1d0297851ff56.png-wh_500x0-wm_3-wmp_4-s_2102986920.png" target="_blank"></a>

<a href="https://s3.51cto.com/oss/201711/08/a1f9ecec5db1d1abe5ae15af8830390b.png-wh_500x0-wm_3-wmp_4-s_177706504.png" target="_blank"></a>

匿名用户上传文件默认权限修改

anon_umask=xxx

匿名用户建立目录

anon_mkdir_write_enable=YES|NO

匿名用户下载

anon_world_readable_only=YES|NO ##设定参数值为no表示匿名用户可以下载

匿名用户删除

anon_other_write_enable=YES|NO 

匿名用户使用的用户身份修改

chown_uploads=YES

chown_username=student

chown_uploads_mode=0644

最大上传速率

anon_max_rate=102400

最大链接数

max_clients=2

2)本地用户设定

local_enable=YES|NO 

<a href="https://s1.51cto.com/oss/201711/08/2eff1b2ac57014fb75c74e5e34d59905.png-wh_500x0-wm_3-wmp_4-s_4270738832.png" target="_blank"></a>

write_enable=YES|NO  ##本地用户写权限限制

<a href="https://s3.51cto.com/oss/201711/08/fe279557679b7579dd84d8dd53d55be5.png-wh_500x0-wm_3-wmp_4-s_4055128464.png" target="_blank"></a>

本地用户家目录修改

local_root=/directory

本地用户上传文件权限

<a href="https://s5.51cto.com/oss/201711/08/5e6d90f1c631d0ae54a450025e737179.png-wh_500x0-wm_3-wmp_4-s_2078922894.png" target="_blank"></a>

local_umask=xxx

限制本地用户浏览/目录

所有用户被锁定到自己的家目录中

chroot_local_user=YES

chmod u-w /home/*

用户黑名单建立

chroot_local_user=NO

chroot_list_enable=YES

chroot_list_file=/etc/vsftpd/chroot_list

<a href="https://s2.51cto.com/oss/201711/08/e7664a59d307d69b79eb6c7fc07f00bd.png-wh_500x0-wm_3-wmp_4-s_143310993.png" target="_blank"></a>

<a href="https://s3.51cto.com/oss/201711/08/1cf00049f5f1e302f6c7abb6770c1f4a.png-wh_500x0-wm_3-wmp_4-s_4205818027.png" target="_blank"></a>

<a href="https://s1.51cto.com/oss/201711/08/87e6254f50b0f53e378478a05b103b68.png-wh_500x0-wm_3-wmp_4-s_3460928309.png" target="_blank"></a>

<a href="https://s2.51cto.com/oss/201711/08/d8ec72edaac9982d93bf1bb1f860d161.png-wh_500x0-wm_3-wmp_4-s_2663522425.png" target="_blank"></a>

<a href="https://s1.51cto.com/oss/201711/08/f27d194b55bef80541e594badb66d49d.png-wh_500x0-wm_3-wmp_4-s_3046562364.png" target="_blank"></a>

<a href="https://s4.51cto.com/oss/201711/08/74a5555718b573d1860999f1e14aed48.png-wh_500x0-wm_3-wmp_4-s_1423692714.png" target="_blank"></a>

用户白名单建立

限制本地用户登陆

vim /etc/vsftpd/ftpusers  ##用户黑名单

vim /etc/vsftpd/user_list  ##用户临时黑名单

用户白名单设定

userlist_deny=NO

/etc/vsftpd/user_list   ##参数设定，此文件变成用户白名单，只在名单中出现的用户可以登陆ftp

<a href="https://s5.51cto.com/oss/201711/08/81cea9ea9cf03a4a93346b75fd1d53df.png-wh_500x0-wm_3-wmp_4-s_2559034881.png" target="_blank"></a>

<a href="https://s5.51cto.com/oss/201711/08/81cea9ea9cf03a4a93346b75fd1d53df.png-wh_500x0-wm_3-wmp_4-s_2559034881.png" target="_blank"> 本文转自 huanzi2017 51CTO博客，原文链接:http://blog.51cto.com/13362895/1979932</a>