![[LinuxFocus-icon]](../../common/images/logolftop_319x45.gif){kind=small} |
|
|
 |
|
| This document is available in: English ChineseGB Deutsch Francais Italiano Nederlands Russian Turkce Polish |
![[Photo of the Author]](../../common/images2/MarioMKnopf.jpg)
by Mario M. Knopf <netzmeister/at/neo5k/dot/org> 锟斤拷锟斤拷锟斤拷锟斤拷: Mario 锟斤拷忙锟斤拷 Linux锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟饺拷锟截的伙拷锟斤拷为锟街★拷锟斤拷业锟斤拷时锟戒，锟斤拷维锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷站锟斤拷neo5k.org 锟斤拷 linuxwallpapers.de. 目录: |
vsftpd - Very Secure FTP Daemon 锟斤拷锟�
摘要:
锟斤拷篇锟斤拷锟斤拷锟斤拷"Very Secure FTP Daemon" 锟侥伙拷锟斤拷锟斤拷锟杰★拷锟斤拷锟饺ｏ拷锟揭伙拷锟斤拷缘亟锟斤拷锟� FTP 锟斤拷 vsftpd锟斤拷之锟斤拷锟斤拷锟角斤拷锟斤拷学习 vsftp 锟截伙拷锟斤拷锟斤拷deamon锟斤拷锟侥帮拷装锟斤拷锟斤拷锟矫猴拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷腔锟揭拷锟斤拷锟揭伙拷锟叫⌒★拷墓锟斤拷懿锟斤拷浴锟�
|
FTP 锟斤拷锟斤拷锟接匡拷锟斤拷使锟斤拷 TCP 锟斤拷Transmission Control Protocol, 锟斤拷锟斤拷锟斤拷锟叫拷椋╋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷莸目煽锟斤拷锟斤拷洹ｏ拷锟剿ｏ拷FTP 锟斤拷锟斤拷锟捷达拷锟斤拷锟叫诧拷锟斤拷要锟斤拷锟侥凤拷锟介丢失锟斤拷锟斤拷锟捷达拷锟斤拷锟解。锟斤拷为 TCP 锟斤拷锟斤拷锟斤拷每锟斤拷锟斤拷锟介都锟斤拷锟斤拷顺锟斤拷摹锟矫伙拷写锟斤拷锟侥★拷锟斤拷锟截革拷锟侥碉拷锟斤。
FTP 锟叫革拷锟捷凤拷锟酵凤拷式锟侥诧拷同锟斤拷为锟斤拷锟斤拷锟街诧拷同锟侥达拷锟斤拷锟斤拷锟酵ｏ拷锟斤拷(stream)模式锟斤拷 end-of-file (EOF) 锟斤拷志锟斤拷锟斤拷慕锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷执锟斤拷锟侥Ｊ斤拷锟� end-of-record (EOR) 锟斤拷锟斤拷志锟斤拷锟斤拷慕锟斤拷锟�
锟斤拷锟解还锟斤拷锟斤拷锟街诧拷同锟侥达拷锟斤拷模式:
ASCII 模式锟斤拷锟斤拷锟侥憋拷锟侥硷拷锟侥达拷锟戒，锟斤拷锟斤拷锟斤拷锟斤拷模式锟斤拷锟节筹拷锟斤拷锟斤拷锟斤拷频锟斤拷锟斤拷莸拇锟斤拷洹ｏ拷没锟斤拷锟斤拷锟揭★拷锟斤拷囟锟斤拷拇锟斤拷锟侥Ｊ斤拷锟斤拷锟斤拷锟斤拷锟斤拷械目突锟斤拷硕锟斤拷锟斤拷锟绞讹拷锟斤拷锟斤拷锟侥硷拷锟斤拷锟斤拷锟斤拷锟皆讹拷锟叫伙拷模式锟斤拷
锟斤拷权锟矫碉拷锟矫伙拷锟斤拷锟斤拷锟斤拷锟诫都锟斤拷使锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷模锟斤拷锟斤拷锟揭伙拷锟斤拷浅锟斤拷锟斤拷氐陌锟饺拷锟斤拷锟斤拷锟斤拷锟揭诧拷锟揭恍╋拷泄锟紽TP锟侥帮拷全锟侥匡拷锟角的筹拷锟斤拷锟姐。1997 锟斤拷10锟铰ｏ拷RFC2228[2] 锟斤拷锟节凤拷锟斤拷锟剿ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷 FTP 锟侥帮拷全锟皆诧拷锟斤拷娣讹拷锟�
vsftpd 锟斤拷锟斤拷锟街达拷锟斤拷"very secure FTP daemon", 锟斤拷全锟斤拷锟斤拷锟侥匡拷锟斤拷锟斤拷 Chris Evans 锟斤拷锟角碉拷锟斤拷要锟斤拷锟斤拷之一锟斤拷锟斤拷锟斤拷锟� FTP 锟斤拷锟斤拷锟斤拷锟斤拷瓶锟斤拷锟斤拷锟斤拷羁硷拷锟绞憋拷颍甙锟饺拷跃锟斤拷锟揭伙拷锟侥匡拷辍�
一锟斤拷锟斤拷锟接撅拷锟斤拷 vsftpd 锟斤拷锟斤拷 chroot 模式锟铰癸拷锟斤拷锟侥ｏ拷chroot 模式锟斤拷锟斤拷为锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� vsftpd 锟剿ｏ拷锟斤拷锟斤拷指锟斤拷一锟斤拷锟铰碉拷目录锟斤拷锟斤拷也锟酵诧拷锟杰凤拷锟斤拷锟角革拷目录之锟斤拷某锟斤拷锟斤拷锟侥硷拷锟斤拷 --- 锟斤拷锟斤拷锟斤拷也锟斤拷为锟斤拷锟斤拷锟斤拷锟较的★拷锟斤拷一锟斤拷锟斤拷锟杰憋拷潜锟节的癸拷锟斤拷锟斤拷锟狡伙拷锟斤拷 FTP 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷系统锟斤拷锟斤拷锟斤拷锟斤拷锟街讹拷锟斤拷锟斤拷锟斤拷锟斤拷锟接讹拷锟斤拷锟斤拷锟剿革拷锟斤拷锟斤拷锟绞э拷锟斤拷泄锟� chroot 锟侥革拷锟斤拷锟斤拷息锟斤拷锟斤拷锟斤拷锟铰边碉拷锟斤拷锟斤拷[3]锟叫得碉拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� vsftpd 锟斤拷锟斤拷锟斤拷锟斤拷全锟斤拷锟斤拷锟斤拷锟斤拷趣锟斤拷锟狡硷拷锟侥讹拷锟斤拷锟斤拷 [4]锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷硕锟斤拷锟斤拷锟皆ｏ拷锟斤拷锟斤拷 FTP 锟斤拷锟斤拷陌锟饺拷锟接︼拷锟斤拷锟斤拷锟斤拷锟揭拷模锟�vsftpd 锟斤拷锟斤拷锟斤拷 FTP 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷越锟斤拷WU-FTPD[5] 锟斤拷锟斤拷锟斤拷锟斤拷员锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷锟斤拷锟斤拷锟接ｏ拷锟斤拷为锟斤拷锟节癸拷去锟侥硷拷锟斤拷锟叫筹拷锟斤拷锟斤拷太锟斤拷陌锟饺憋拷荨锟�
锟矫碉拷源锟斤拷锟诫并锟解开 tarball 锟襟，斤拷锟斤拷锟铰斤拷锟斤拷目录目录锟斤拷锟斤拷锟斤拷 make锟斤拷锟斤拷锟斤拷锟角憋拷要锟斤拷锟斤拷锟斤拷锟绞撅拷锟斤拷锟�
neo5k@phobos> tar xzvf
vsftpd-x.x.x.tar.gz
neo5k@phobos> cd vsftpd-x.x.x
neo5k@phobos> make
neo5k@phobos> mkdir /var/ftp
neo5k@phobos> useradd -d /var/ftp ftp
neo5k@phobos> chown root.root /var/ftp
neo5k@phobos> chmod og-w /var/ftp
neo5k@phobos> make install
锟斤拷锟斤拷锟� manpage 应锟斤拷锟窖撅拷锟斤拷锟斤拷锟斤拷锟斤拷系统锟叫碉拷锟斤拷确锟斤拷位锟斤拷锟剿★拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷斐ｏ拷锟斤拷锟斤拷锟介烦一锟斤拷锟斤拷止锟斤拷锟斤拷锟揭诧拷锟斤拷锟斤拷锟斤拷锟斤拷锟筋工锟斤拷锟斤拷neo5k@phobos> cp vsftpd /usr/sbin/vsftpd
neo5k@phobos> cp vsftpd.conf.5 /usr/share/man/man5
neo5k@phobos> cp vsftpd.8 /usr/share/man/man8
neo5k@phobos> cp vsftpd.conf /etc
# Comment line
# Anonymus FTP-access permitted?
YES/NO
anonymous_enable=NO
# Permit anonymus upload? YES/NO
anon_upload_enable=NO
# Permission for anonymus users to make new directories?
YES/NO
anon_mkdir_write_enable=NO
# Permission for anonymus users to do other write operations
- like renaming or deleting? YES/NO
anon_other_write_enable=NO
# Log on by local users permitted? YES/NO
local_enable=YES
# Shall local users be locked into their home directory?
YES/NO
chroot_local_user=YES
# Highest permitted data transfer rate in bytes per second
for local logged on users. Default = 0 (unlimited)
local_max_rate=7200
# General write permission? YES/NO
write_enable=YES
# Enable messages when changing directories? YES/NO
dirmessage_enable=YES
# Welcome banner at users logon.
ftpd_banner="Welcome to neo5k's FTP service."
# Activate logging? YES/NO
xferlog_enable=YES
# Logging of all FTP activities? YES/NO
# Careful! This can generate large quantities of
data.
log_ftp_protocol=NO
# Confirm connections are established on port 20 (ftp data)
only. YES/NO
connect_from_port_20=YES
# Timeout during idle sessions
idle_session_timeout=600
# Data connection timeout
data_connection_timeout=120
# Access through Pluggable Authentication Modules
(PAM)
pam_service_name=vsftpd
# Standalone operation? YES/NO - depending on operation mode
(inetd, xinetd, Standalone)
# The author's FTP service is being startet with xinetd,
therefore the value here is NO.
listen=NO
neo5k@phobos> vi /etc/inetd.conf
# ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd ftp stream tcp nowait root /usr/sbin/tcpd vsftpd
# vsftp daemon.
service ftp
{
disable = no
socket_type = stream
wait = no
user = root
server = /usr/sbin/vsftpd
per_source = 5
instances = 200
no_access = 192.168.1.3
banner_fail = /etc/vsftpd.busy_banner
log_on_success += PID HOST DURATION
log_on_failure += HOST
nice = 10
}
# Shall the vsftp daemon run in standalone
operation? YES/NO
listen=YES
neo5k@phobos> /usr/sbin/vsftpd &
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟铰凤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟饺凤拷模锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷涂锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟�neo5k@phobos> vsftpd &
锟斤拷锟节猴拷一锟街凤拷式锟斤拷锟斤拷锟角匡拷锟斤拷锟斤拷锟斤拷锟斤拷路锟斤拷锟斤拷锟斤拷锟角凤拷锟斤拷确neo5k@phobos> echo $PATH
/usr/sbin:/bin:/usr/bin:/sbin:/usr/X11R6/bin
neo5k@phobos> ftp phobos Connected to phobos 220 "Welcome to neo5k's FTP service." Name (phobos:neo5k): testuser 331 Please specify the password. Password: 230 Login successful Remote system type is UNIX. Using binary mode to transfer files. ftp> ls -l 229 Entering Extended Passive Mode 150 Here comes the directory listing drwxr-xr-x 11 500 100 400 May 07 16:22 docs drwxr-xr-x 9 500 100 464 Feb 01 23:05 hlds drwxr-xr-x 39 500 100 4168 May 10 09:15 projects 226 Directory send OK. ftp>
锟斤拷然锟斤拷锟斤拷锟斤拷锟斤拷芙锟斤拷锟斤拷嵌锟� vsftpd 锟结供锟侥伙拷锟斤拷锟斤拷一瞥锟斤拷锟斤拷锟� FTP 锟斤拷锟斤拷锟斤拷锟斤拷锟结供锟剿达拷锟斤拷锟侥可癸拷锟斤拷锟矫碉拷选锟筋。锟斤拷锟斤拷锟斤拷锟揭拷锟斤拷锟揭伙拷锟斤拷芯锟� vsftpd 锟侥伙拷锟斤拷应锟矫凤拷锟斤拷锟斤拷目锟斤拷锟斤拷页[6]锟斤拷锟侥讹拷锟斤拷锟斤拷一锟斤拷锟斤拷锟侥碉拷锟斤拷
|
|
锟斤拷页锟斤拷LinuxFocus锟洁辑锟斤拷维锟斤拷
© Mario M. Knopf, FDL LinuxFocus.org |
锟斤拷锟斤拷锟斤拷息:
|
2004-07-10, generated by lfparser version 2.46