{"id":4316,"date":"2014-10-07T00:51:05","date_gmt":"2014-10-06T16:51:05","guid":{"rendered":"https:\/\/www.icocean.com\/blog\/?p=4316"},"modified":"2014-10-07T00:53:52","modified_gmt":"2014-10-06T16:53:52","slug":"centos-6-3-%e6%b7%b1%e5%85%a5vsftpd%e7%9a%84%e9%ab%98%e7%ba%a7%e5%ba%94%e7%94%a8","status":"publish","type":"post","link":"https:\/\/www.icocean.com\/blog\/?p=4316","title":{"rendered":"CentOS 6.3 \u6df1\u5165vsftpd\u7684\u9ad8\u7ea7\u5e94\u7528"},"content":{"rendered":"

http:\/\/web.mit.edu\/rhel-doc\/4\/RH-DOCS\/rhel-rg-en-4\/s1-ftp-vsftpd-conf.html
\nvsftp\u670d\u52a1
\n\u4e0a\u4f20\u3001\u4e0b\u8f7d\u3001\u521b\u5efa\u3001\u5220\u9664\u3001\u91cd\u547d\u540d<\/code><\/p>\n

\u5927\u7eb2\uff1a
\n\u4e00\u3001\u533f\u540d\u7528\u6237
\n\u4e8c\u3001\u7cfb\u7edf\u7528\u6237
\n\u4e09\u3001\u865a\u62df\u7528\u6237<\/p>\n

————————
\nftp> ?
\nCommands may be abbreviated. Commands are:<\/p>\n

! debug mdir sendport site
\n$ dir mget put size
\naccount disconnect mkdir pwd status
\nappend exit mls quit struct
\nascii form mode quote system
\nbell get modtime recv sunique
\nbinary glob mput reget tenex
\nbye hash newer rstatus tick
\ncase help nmap rhelp trace
\ncd idle nlist rename type
\ncdup image ntrans reset user
\nchmod lcd open restart umask
\nclose ls prompt rmdir verbose
\ncr macdef passive runique ?
\ndelete mdelete proxy send<\/p>\n

\u5e38\u7528\u7684\u547d\u4ee4
\n\uff01\uff1a \u9000\u51fa
\nquit\uff1a \u9000\u51fa
\nexit\uff1a \u9000\u51fa<\/p>\n

cd\uff1a \u5728\u767b\u9646vsftpd\u540e\uff0c\u5207\u6362\u76ee\u5f55
\nlcd\uff1a \u5207\u6362\u7cfb\u7edf\u4e0a\u76ee\u5f55<\/p>\n

delete\uff1a\u5220\u9664\u6587\u4ef6\uff0c\u6587\u4ef6
\nrmdir\uff1a \u5220\u9664\u76ee\u5f55\uff0c\u76ee\u5f55<\/p>\n

put\uff1a \u4e0a\u4f20\uff1b\u4e00\u6b21\u4e0a\u4f20\u4e00\u4e2a\u6587\u4ef6
\nmput\uff1a \u4e0a\u4f20\uff1b\u4e00\u6b21\u4e0a\u4f20\u591a\u4e2a\u6587\u4ef6<\/p>\n

get\uff1a \u4e0b\u8f7d\uff1b\u4e00\u6b21\u4e0b\u8f7d\u4e00\u4e2a\u6587\u4ef6
\nmget\uff1a \u4e0b\u8f7d\uff1a\u4e00\u6b21\u4e0b\u8f7d\u591a\u4e2a\u6587\u4ef6<\/p>\n

rename\uff1a\u91cd\u547d\u540d
\nmkdir\uff1a \u521b\u5efa\u76ee\u5f55<\/p>\n

dir\uff1a \u67e5\u770b\u76ee\u5f55\u5217\u8868
\nls: \u67e5\u770b\u76ee\u5f55\u5217\u8868<\/p>\n

#\u53c2\u6570\u7981\u7528\u533f\u540d\u7528\u6237\u548c\u7cfb\u7edf\u7528\u6237\u8bbf\u95ee
\nanonymous_enable=NO
\nlocal_enable=NO
\n#\u8bbf\u95ee\u7ed3\u679c\u5982\u4e0b
\n[root@localhost vsftpd]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n500 OOPS: vsftpd: both local and anonymous access disabled!
\nftp><\/p>\n

======================================================================================================================
\n===========================\u533f===============\u540d====================\u7528======================\u6237==========================
\n======================================================================================================================<\/p>\n

================================================\u521b\u5efa\u76ee\u5f55\u6743\u9650==========================================================
\n\u9996\u5148\u6765\u770b\u533f\u540d\u7528\u6237
\n1\u3001\u5728\u533f\u540d\u7528\u6237\u7684\u6839\u76ee\u5f55\u4e0b\u521b\u5efa\u4e00\u4e2a\u5b50\u76ee\u5f55
\n[root@vsftpd ~]# mkdir \/var\/ftp\/upload
\n[root@vsftpd ~]# ll -d \/var\/ftp\/upload\/
\ndrwxr-xr-x 2 root root 4096 7\u6708 19 19:11 \/var\/ftp\/upload\/<\/p>\n

2\u3001\u533f\u540d\u7528\u6237\u5728upload\u76ee\u5f55\u4e2d\u7b2c\u4e00\u6b21\u521b\u5efatest\u76ee\u5f55
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,134,99).
\n150 Here comes the directory listing.
\ndrwxr-xr-x 2 0 0 4096 Mar 01 2013 pub
\ndrwxr-xr-x 2 0 0 4096 Jul 19 11:11 upload
\n226 Directory send OK.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> mkdir test #\u6743\u9650\u88ab\u62d2\u7edd\uff0c\u9519\u8bef\u4ee3\u7801550
\n550 Permission denied.<\/p>\n

3\u3001\u4fee\u6539vsftpd\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u589e\u52a0\u521b\u5efa\u76ee\u5f55\u7684\u6743\u9650
\n[root@vsftpd vsftpd]# vim vsftpd.conf
\nanon_mkdir_write_enable=YES<\/p>\n

4\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u540e\uff0c\u6bcf\u6b21\u90fd\u8981\u91cd\u65b0\u8f7d\u5165\u914d\u7f6e\u6587\u4ef6
\n[root@vsftpd vsftpd]# service vsftpd restart
\n\u5173\u95ed vsftpd\uff1a [\u786e\u5b9a]
\n\u4e3a vsftpd \u542f\u52a8 vsftpd\uff1a [\u786e\u5b9a]<\/p>\n

5\u3001\u533f\u540d\u7528\u6237\u7b2c\u4e8c\u6b21\u767b\u5f55\u5e76\u5728upload\u76ee\u5f55\u4e2d\u521b\u5efatest\u76ee\u5f55
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> mkdir test #\u63d0\u793a\u521b\u5efa\u76ee\u5f55\u64cd\u4f5c\u5931\u8d25\uff0c\u9519\u8bef\u4ee3\u7801\u4f9d\u65e7\u662f550
\n550 Create directory operation failed.
\n\u6ce8\u91ca\uff1a\u540c\u6837\u662f\u9519\u8bef\u4ee3\u7801550\uff0c\u4f46\u662f\u4ee3\u8868\u7684\u610f\u4e49\u662f\u4e0d\u4e00\u6837\u7684\u3002
\n\u7b2c\u4e00\u4e2a500\uff1a\u63d0\u793a\u6743\u9650\u88ab\u62d2\u7edd\uff0c\u5e94\u8be5\u5c5e\u4e8e\u914d\u7f6e\u6587\u4ef6\u5c42\u7684
\n\u7b2c\u4e8c\u4e2a500\uff1a\u63d0\u793a\u521b\u5efa\u76ee\u5f55\u64cd\u4f5c\u5931\u8d25\uff0c\u5e94\u8be5\u5c5e\u4e8e\u6587\u4ef6\u5c42\u7684
\n\u7ed3\u8bba\uff1a\u5e94\u8be5\u5c5e\u4e8eupload\u76ee\u5f55\u7684\u6743\u9650\u95ee\u9898\uff0c\u67e5\u770bupload\u76ee\u5f55\u7684\u6743\u9650\uff0c\u5bbf\u4e3b\u5bbf\u7ec4\u90fd\u662froot\u5e76\u4e14\u5176\u5b83\u7528\u6237\u6ca1\u6709\u5199\u5165\u7684\u6743\u9650
\n[root@vsftpd ~]# ll -d \/var\/ftp\/upload\/
\ndrwxr-xr-x 2 root root 4096 7\u6708 19 19:11 \/var\/ftp\/upload\/
\n\u8d4b\u4e88\u5176\u5b83\u7528\u6237\u5bf9upload\u76ee\u5f55\u6709\u5199\u5165\u7684\u6743\u9650
\n[root@vsftpd ~]# chmod o+w \/var\/ftp\/upload\/
\n[root@vsftpd ~]# ll -d \/var\/ftp\/upload\/
\ndrwxr-xrwx 2 root root 4096 7\u6708 19 19:11 \/var\/ftp\/upload\/<\/p>\n

6\u3001\u533f\u540d\u7528\u6237\u7b2c\u4e09\u6b21\u767b\u9646\u5e76\u5728upload\u76ee\u5f55\u4e2d\u521b\u5efatest\u76ee\u5f55
\nftp> mkdir test
\n257 “\/upload\/test” created
\nftp> pwd
\n257 “\/upload”
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,171,81).
\n150 Here comes the directory listing.
\ndrwx—— 2 14 50 4096 Jul 19 11:23 test
\n226 Directory send OK.<\/p>\n

\u603b\u7ed3:\u9488\u5bf9vsftpd\u670d\u52a1\u6765\u8bf4\uff1b\u6743\u9650=vsftpd\u914d\u7f6e\u6587\u4ef6\u7684\u6743\u9650+\u6839\u76ee\u5f55\u7684\u662f\u5426\u6709\u5199\u5165\u6743\u9650<\/p>\n

————-\u5c0f\u5c0f\u7684\u53d1\u73b0—————-
\n\u5728\u767b\u9646\u72b6\u6001\u4e0b\uff0c\u7ea7\u8054\u521b\u5efa\u76ee\u5f55\u540e\uff0c\u867d\u7136\u76ee\u5f55\u4e5f\u80fd\u521b\u5efa\u6210\u529f\uff0c\u4f46\u662f\u6253\u5f00\u5374\u5931\u8d25\uff0c\u5982\u4e0b
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,178,230).
\n150 Here comes the directory listing.
\n-rw——- 1 14 50 16558 Jul 19 16:49 Ins.log
\n226 Directory send OK.
\nftp> mkdir ftproot
\n257 “\/upload\/ftproot” created
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,191,8).
\n150 Here comes the directory listing.
\n-rw——- 1 14 50 16558 Jul 19 16:49 Ins.log
\ndrwx—— 2 14 50 4096 Jul 19 17:00 ftproot
\n226 Directory send OK.
\nftp> cd ftproot
\n250 Directory successfully changed.
\nftp> pwd
\n257 “\/upload\/ftproot”
\nftp> mkdir test
\n257 “\/upload\/ftproot\/test” created
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,233,207).
\n150 Here comes the directory listing.
\n226 Transfer done (but failed to open directory). #\u4f20\u8f93\u6210\u529f\uff0c\u4f46\u662f\u6253\u5f00\u76ee\u5f55\u5931\u8d25<\/p>\n

\u89e3\u51b3\u529e\u6cd5\uff1a
\n\u9996\u5148\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\uff0c\u7136\u540e\u91cd\u542fvsftpd\u670d\u52a1\uff0c\u6700\u540e\u518d\u6b21\u67e5\u770b
\n\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\uff0c\u5982\u4e0b
\n[root@vsftpd ~# vim \/etc\/vsftpd\/vsftpd.conf
\nanon_world_readable_only=NO<\/p>\n

# service vsftpd restart<\/p>\n

#ftp> dir ftproot #\u67e5\u770b\u6210\u529f
\n227 Entering Passive Mode (127,0,0,1,102,170).
\n150 Here comes the directory listing.
\ndrwx—— 2 14 50 4096 Jul 19 17:00 test
\n226 Directory send OK.
\n================================================\u4e0a\u4f20\u6743\u9650==========================================================
\n1\u3001\u4e0a\u4f20\u672c\u5730\u6587\u4ef6\uff1b\u6d4b\u8bd5
\n[root@vsftpd ~]# ll
\n\u603b\u7528\u91cf 36
\n-rw——-. 1 root root 981 6\u6708 30 21:13 anaconda-ks.cfg
\n-rw-r–r–. 1 root root 16558 6\u6708 30 21:13 install.log
\n-rw-r–r–. 1 root root 3482 6\u6708 30 21:10 install.log.syslog
\ndrwxr-xr-x 2 root root 4096 7\u6708 19 18:53 vsftpd
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> put install.log #\u4e0a\u4f20\u672c\u5730install.log\u6587\u4ef6\uff0c\u6743\u9650\u88ab\u62d2\u7edd
\nlocal: install.log remote: install.log
\n227 Entering Passive Mode (127,0,0,1,95,49).
\n550 Permission denied.
\n\u6743\u9650\u88ab\u62d2\u7edd\uff0c\u5f88\u591a\u90fd\u662f\u56e0\u4e3a\u914d\u7f6e\u6587\u4ef6\u7684\u95ee\u9898<\/p>\n

2\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u5e76\u91cd\u542fvsftpd\u670d\u52a1
\n[root@vsftpd ~]# vi \/etc\/vsftpd\/vsftpd.conf
\nanon_upload_enable=YES
\n[root@vsftpd ~]# service vsftpd restart
\n\u5173\u95ed vsftpd\uff1a [\u786e\u5b9a]
\n\u4e3a vsftpd \u542f\u52a8 vsftpd\uff1a [\u786e\u5b9a]<\/p>\n

3\u3001\u518d\u6b21\u767b\u5f55\uff0c\u4e0a\u4f20\u6d4b\u8bd5\u6587\u4ef6
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> put install.log
\nlocal: install.log remote: install.log
\n227 Entering Passive Mode (127,0,0,1,26,235).
\n150 Ok to send data.
\n226 Transfer complete.
\n16558 bytes sent in 0.0755 secs (219.29 Kbytes\/sec)
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,169,5).
\n150 Here comes the directory listing.
\n-rw——- 1 14 50 16558 Jul 19 11:33 install.log
\ndrwx—— 2 14 50 4096 Jul 19 11:23 test<\/p>\n

================================================\u5220\u9664|\u91cd\u547d\u540d\u6743\u9650==========================================================
\n[root@vsftpd vsftpd]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,221,162).
\n150 Here comes the directory listing.
\n-rw——- 1 14 50 16558 Jul 19 11:33 install.log
\ndrwx—— 2 14 50 4096 Jul 19 11:23 test
\n226 Directory send OK.
\nftp> rename install.log Ins.log #\u5c06\u6587\u4ef6install.log\u91cd\u547d\u540d\u4e3aIns.log \u6210\u529f
\n350 Ready for RNTO.
\n250 Rename successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,203,30).
\n150 Here comes the directory listing.
\n-rw——- 1 14 50 16558 Jul 19 11:33 Ins.log
\ndrwx—— 2 14 50 4096 Jul 19 11:23 test
\n226 Directory send OK.
\nftp> rename test FileTest #\u5c06\u76ee\u5f55test\u91cd\u547d\u540d\u4e3aFileTest \u6210\u529f
\n350 Ready for RNTO.
\n250 Rename successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,237,149).
\n150 Here comes the directory listing.
\ndrwx—— 2 14 50 4096 Jul 19 11:23 FileTest
\n-rw——- 1 14 50 16558 Jul 19 11:33 Ins.log
\n226 Directory send OK.
\nftp> delete Ins.log #\u5220\u9664\u6587\u4ef6Ins.log \u4f7f\u7528delete \u6210\u529f
\n250 Delete operation successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,41,156).
\n150 Here comes the directory listing.
\ndrwx—— 2 14 50 4096 Jul 19 11:23 FileTest
\nftp> delete FileTest #delete\u65e0\u6cd5\u9488\u5bf9\u76ee\u5f55\u5220\u9664\uff0c\u53ea\u80fd\u9488\u5bf9\u6587\u4ef6
\n550 Delete operation failed.
\nftp> rmdir FileTest #rmdir\u662f\u9488\u5bf9\u76ee\u5f55\u5220\u9664\u7684
\n250 Remove directory operation successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,197,212).
\n150 Here comes the directory listing.
\n-rw——- 1 14 50 16558 Jul 19 16:49 Ins.log
\n226 Directory send OK.
\nftp><\/p>\n

================================================\u4e0b\u8f7d\u6743\u9650==========================================================
\n1\u3001\u767b\u5f55\u5e76\u4e0b\u8f7d\u6587\u4ef6
\n[root@vsftpd mnt]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,103,89).
\n150 Here comes the directory listing.
\ndrwx—— 2 14 50 4096 Jul 19 11:23 FileTest
\n-rw——- 1 14 50 805 Jul 19 11:48 fstab
\nftp> get FileTest #\u6587\u4ef6\u6253\u5f00\u5931\u8d25\uff0c\u8fd8\u662f\u6743\u9650\u95ee\u9898
\nlocal: FileTest remote: FileTest
\n227 Entering Passive Mode (127,0,0,1,61,141).
\n550 Failed to open file.<\/p>\n

2\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\uff0c\u6dfb\u52a0\u4e0b\u8f7d\u6743\u9650\u5e76\u91cd\u542f\u670d\u52a1
\n[root@vsftpd mnt]# vim \/etc\/vsftpd\/vsftpd.conf
\nanon_world_readable_only=NO
\n[root@vsftpd mnt]# service vsftpd restart
\n\u5173\u95ed vsftpd\uff1a [\u786e\u5b9a]
\n\u4e3a vsftpd \u542f\u52a8 vsftpd\uff1a [\u786e\u5b9a]<\/p>\n

3\u3001\u518d\u6b21\u767b\u5f55\uff0c\u4e0b\u8f7d \u6210\u529f
\n[root@vsftpd mnt]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): ftp
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> cd upload
\n250 Directory successfully changed.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,139,108).
\n150 Here comes the directory listing.
\ndrwx—— 2 14 50 4096 Jul 19 11:23 FileTest
\n-rw——- 1 14 50 805 Jul 19 11:48 fstab
\n226 Directory send OK.
\nftp> mget FileTest fstab
\nmget fstab? yes
\n227 Entering Passive Mode (127,0,0,1,157,240).
\n150 Opening BINARY mode data connection for fstab (805 bytes).
\n226 Transfer complete.
\n805 bytes received in 2.8e-05 secs (28750.00 Kbytes\/sec)
\nftp> !
\n[root@vsftpd mnt]# ll #\u4e0b\u8f7d\u6210\u529f
\n\u603b\u7528\u91cf 4
\n-rw-r–r– 1 root root 805 7\u6708 19 19:56 fstab<\/p>\n

==========================================vsftpd.conf\u914d\u7f6e\u6587\u4ef6\u6982\u8ff0=======================================================<\/p>\n

anonymous_enable=YES #\u5141\u8bb8\u533f\u540d\u7528\u6237\u8bbf\u95ee\uff08yes\uff0c\u4e3a\u5141\u8bb8\uff0cno\u4e3a\u4e0d\u5141\u8bb8\uff09
\nlocal_enable=NO #\u662f\u5426\u7981\u7528\u672c\u5730\u7528\u6237\uff08\u8bbe\u7f6e\u4e3ano\u662f\u8868\u793a\u7981\u7528\uff0cyes\u8868\u793a\u4e0d\u7981\u7528\uff09
\nwrite_enable=YES #\u5141\u8bb8\u5f00\u653e\u5199\u7684\u6743\u9650
\nanon_umask=022 #\u8bbe\u7f6e\u533f\u540d\u7528\u6237\u4e0a\u4f20\u5efa\u7acb\u6587\u4ef6\u65f6\u7684\u6743\u9650\u63a9\u7801
\nanon_upload_enable=YES #\u5141\u8bb8\u533f\u540d\u4e0a\u4f20\u6587\u4ef6
\nanon_mkdir_write_enable=YES #\u5141\u8bb8\u533f\u540d\u7528\u6237\u521b\u5efa\u76ee\u5f55
\ndirmessage_enable=YES #\u7528\u6237\u5207\u6362\u8fdb\u5165\u76ee\u5f55\u65f6\u663e\u793a.message\uff08\u5982\u679c\u5b58\u5728\uff09\u6587\u4ef6\u7684\u5185\u5bb9
\nxferlog_enable=YES #\u5f00\u542fxferlog\u65e5\u5fd7\uff0c\u9ed8\u8ba4\u8bb0\u5f55\u5230\/var\/log\/xferlog\uff09
\nconnect_from_port_20=YES #\u8fde\u63a5\u63a7\u5236\u7aef\u53e3\u4e3a20
\nxferlog_std_format=YES #\u542f\u7528\u6807\u51c6xferlog\u7684\u65e5\u5fd7\u683c\u5f0f\uff0c\u82e5\u7981\u7528\u6b64\u9879\uff0c\u5c06\u4f7f\u7528vsftpd\u81ea\u5df1\u7684\u65e5\u5fd7\u683c\u5f0f
\nlisten=YES #\u662f\u5426\u4ee5\u72ec\u7acb\u8fd0\u884c\u7684\u65b9\u5f0f\u76d1\u542c\u670d\u52a1
\npam_service_name=vsftpd #\u8bberoot\u7f6e\u7528\u4e8e\u7528\u6237\u8ba4\u8bc1\u7684PAM\u6587\u4ef6\u4f4d\u7f6e\uff08\/etc\/pam.d\/\u76ee\u5f55\u4e2d\u5bf9\u5e94\u7684\u6587\u4ef6\u540d\uff09
\nuserlist_enable=NO #\u672a\u542f\u7528\u672c\u5730\u7528\u6237\u65f6\uff0c\u53ef\u4ee5\u5c06\u7528\u6237\u5217\u8868\u529f\u80fd\u7981\u7528
\ntcp_wrappers=YES #\u662f\u5426\u5f00\u542ftcp_wrappers\u4e3b\u673a\u8bbf\u95ee\u63a7\u5236
\nchroot_local_user=YES #\u662f\u5426\u5c06FTP\u672c\u5730 \u7528\u6237\u7981\u9522\u5728\u5bbf\u4e3b\u76ee\u5f55\u4e2d
\nno_anon_password=YES #\u5141\u8bb8\u533f\u540d\u8bbf\u95ee\u4e0d\u9700\u8981\u5bc6\u7801\uff08\u52a0\u4e5f\u53ef\u4ee5\uff0c\u4e0d\u52a0\u4e5f\u53ef\u4ee5\uff09<\/p>\n

\u53ef\u65b0\u6dfb\u52a0\u7684\u4f60\u4eec\u7528\u6237\u7684\u8bbe\u7f6e\u503c
\nanon_world_readable_only=YES #\u4ec5\u5141\u8bb8\u533f\u540d\u7528\u6237\u5177\u6709\u4e0b\u8f7d\u53ef\u8bfb\u6587\u4ef6\u7684\u6743\u9650\uff09
\nanon_other_write_enable=YES #\u662f\u5426\u5141\u8bb8\u533f\u540d\u7528\u6237\u6709\u5176\u5b83\u5199\u5165\u6743\u9650\uff0c\u5982\u5bf9\u6587\u4ef6\u6539\u540d\uff0c\u8986\u76d6\u4ee5\u53ca\u5220\u9664(\u6b64\u9009\u9879\u614e\u7528\uff09<\/p>\n

anon_world_readable_only=NO
\nanon_upload_enable=YES
\ndownload_enable=NO
\nanon_mkdir_write_enable=YES
\nanon_other_write_enable=YES
\nlocel_root=\/home\/ftpsite\/mike<\/p>\n

======================================================================================================================
\n===========================\u672c===============\u5730====================\u7528======================\u6237==========================
\n======================================================================================================================
\n\u672c\u5730\u7528\u6237\u9700\u8981\u7ed3\u5408ftpusers\u548cuser_list\u8fd9\u4e24\u4e2a\u6587\u4ef6
\nftpusers\uff1a\u8be5\u6587\u4ef6\u4e2d\u5305\u542b\u7684\u7528\u6237\u5e10\u6237\u5c06\u88ab\u7981\u6b62\u767b\u5165vsftpd\u670d\u52a1\u5668\uff0c\u4e0d\u7ba1\u7528\u6237\u662f\u4e0d\u662f\u5728user_list\u6587\u4ef6\u51fa\u73b0
\nuser_list\uff1a\u8be5\u6587\u4ef6\u4e2d\u5305\u542b\u7684\u7528\u6237\u5e10\u6237\u53ef\u80fd\u88ab\u7981\u6b62\u767b\u5165vsftpd\u670d\u52a1\u5668\uff0c\u4e5f\u53ef\u80fd\u88ab\u5141\u8bb8\u767b\u5165\uff0c\u5177\u4f53\u8981\u770buserlist_enable
\n(\u662f\u5426\u542f\u7528user_list\u7528\u6237\u5217\u8868\u6587\u4ef6)\u7684\u914d\u7f6e(\u914d\u7f6e\u6210YES\uff0c\u5219\u542f\u7528\uff0cNO\u5219\u4e0d\u542f\u7528)\uff0c\u5f53userlist_enable=YES\uff0c\u4e4b\u540e\u770buserlist_deny\u7684\u914d\u7f6e
\n(\u4e3aYES\u5219\u4ec5\u7981\u6b62\u7528\u6237\u5217\u8868\u6587\u4ef6\u7684\u7528\u6237\u8d26\u53f7\u767b\u5165\uff0c\u4e3aNO\u5219\u4ec5\u7528\u6237\u5217\u8868\u6587\u4ef6\u7684\u7528\u6237\u8d26\u53f7\u767b\u5165)<\/p>\n

[root@vsftpd vsftpd]# ll
\n\u603b\u7528\u91cf 20
\n-rw——- 1 root root 125 3\u6708 1 2013 ftpusers
\n-rw——- 1 root root 361 3\u6708 1 2013 user_list
\n-rw——- 1 root root 4990 7\u6708 20 01:06 vsftpd.conf
\n-rwxr–r– 1 root root 338 3\u6708 1 2013 vsftpd_conf_migrate.sh<\/p>\n

[root@vsftpd ~]# useradd scott
\n[root@vsftpd ~]# echo “123” |passwd –stdin “scott”
\n\u66f4\u6539\u7528\u6237 scott \u7684\u5bc6\u7801 \u3002
\npasswd\uff1a \u6240\u6709\u7684\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c\u5df2\u7ecf\u6210\u529f\u66f4\u65b0\u3002<\/p>\n

================================================\u521b\u5efa\u76ee\u5f55\u6743\u9650==========================================================
\n1\u3001\u521b\u5efa\u7cfb\u7edf\u8d26\u6237
\n[root@vsftpd ~]# useradd scott
\n[root@vsftpd ~]# echo “123” |passwd –stdin “scott”
\n\u66f4\u6539\u7528\u6237 scott \u7684\u5bc6\u7801 \u3002
\npasswd\uff1a \u6240\u6709\u7684\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c\u5df2\u7ecf\u6210\u529f\u66f4\u65b0\u3002<\/p>\n

2\u3001\u7cfb\u7edf\u8d26\u6237\u767b\u5f55\u6d4b\u8bd5
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): scott
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> pwd
\n257 “\/home\/scott”
\nftp> cd \/mnt\/
\n250 Directory successfully changed.
\nftp> pwd
\n257 “\/mnt”
\nftp> cd \/usr\/local\/
\n250 Directory successfully changed.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,217,163).
\n150 Here comes the directory listing.
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 bin
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 etc
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 games
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 include
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 lib
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 lib64
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 libexec
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 sbin
\ndrwxr-xr-x 5 0 0 4096 Jun 30 13:06 share
\ndrwxr-xr-x 2 0 0 4096 Sep 23 2011 src
\n226 Directory send OK.
\n\u6ce8\u91ca\uff1a\u60f3\u5fc5\u5927\u5bb6\u4e5f\u770b\u5230\u4e86\uff0c\u7cfb\u7edf\u8d26\u6237scott\u767b\u5f55\u540e\uff0c\u53ef\u4ee5\u4efb\u610f\u5207\u6362\u5230\u7cfb\u7edf\u7684\u4efb\u610f\u76ee\u5f55\uff0c\u663e\u7136\u8fd9\u6837\u662f\u5341\u5206\u4e0d\u5b89\u5168\u7684\uff0c\u5e94\u8be5\u505a\u5230
\n\u7cfb\u7edf\u7528\u6237\u767b\u5f55\u540e\u9501\u5b9a\u5230\u81ea\u5df2\u7684\u5bb6\u76ee\u5f55\u4e2d\uff0c\u7981\u6b62\u4efb\u610f\u5207\u6362\u76ee\u5f55\u8def\u5f84<\/p>\n

3\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6
\n[root@vsftpd ~]# vim \/etc\/vsftpd\/vsftpd.conf
\nchroot_local_user=YES<\/p>\n

4\u3001\u7cfb\u7edf\u8d26\u6237\u518d\u6b21\u767b\u5f55\uff0c\u6d4b\u8bd5\u5207\u6362\u76ee\u5f55\u8def\u5f84
\n[root@vsftpd ~]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): scott
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> pwd
\n257 “\/”
\nftp> cd \/mnt\/
\n550 Failed to change directory. #\u5931\u8d25\u7684\u5207\u6362\u76ee\u5f55
\nftp> pwd
\n257 “\/”
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,152,129).
\n150 Here comes the directory listing.
\n226 Directory send OK.<\/p>\n

==========================================vsftpd.conf\u914d\u7f6e\u6587\u4ef6\u6982\u8ff0=======================================================
\nanonymous_enable=NO #\u5141\u8bb8\u533f\u540d\u7528\u6237\u8bbf\u95ee\uff08yes\uff0c\u4e3a\u5141\u8bb8\uff0cno\u4e3a\u4e0d\u5141\u8bb8\uff09
\nlocal_enable=YES #\u662f\u5426\u7981\u7528\u672c\u5730\u7528\u6237 \uff08\u8bbe\u7f6e\u4e3ano\u662f\u8868\u793a\u7981\u7528\uff0cyes\u8868\u793a\u4e0d\u7981\u7528\uff09
\nwrite_enable=YES #\u5141\u8bb8\u5f00\u653e\u5199\u7684\u6743\u9650
\nlocal_umask=022 #\u8bbe\u7f6e\u7528\u6237\u4e0a\u4f20\u5efa\u7acb\u6587\u4ef6\u65f6\u7684\u6743\u9650\u63a9\u7801
\ndirmessage_enable=YES #\u7528\u6237\u5207\u6362\u8fdb\u5165\u76ee\u5f55\u65f6\u663e\u793a.message\uff08\u5982\u679c\u5b58\u5728\uff09\u6587\u4ef6\u7684\u5185\u5bb9
\nxferlog_enable=YES #\uff08\u5f00\u542fxferlog\u65e5\u5fd7\uff0c\u9ed8\u8ba4\u8bb0\u5f55\u5230\/var\/log\/xferlog\uff09
\nconnect_from_port_20=YES #\u8fde\u63a5\u63a7\u5236\u7aef\u53e3\u4e3a20
\nxferlog_std_format=YES #\u542f\u7528\u6807\u51c6xferlog\u7684\u65e5\u5fd7\u683c\u5f0f\uff0c\u82e5\u7981\u7528\u6b64\u9879\uff0c\u5c06\u4f7f\u7528vsftpd\u81ea\u5df1\u7684\u65e5\u5fd7\u683c\u5f0f
\nascii_upload_enable=YES #\u5141\u8bb8\u7528\u6237\u4f7f\u7528Ascii\u7801\u683c\u5f0f\u4e0a\u4f20\u6587\u4ef6
\nascii_download_enable=YES #\u5141\u8bb8\u7528\u6237\u4f7f\u7528Ascii\u7801\u683c\u5f0f\u4e0b\u8f7d\u6587\u4ef6
\nlisten=YES #\u662f\u5426\u4ee5\u72ec\u7acb\u8fd0\u884c\u7684\u65b9\u5f0f\u76d1\u542c\u670d\u52a1
\npam_service_name=vsftpd #\u8bberoot\u7f6e\u7528\u4e8e\u7528\u6237\u8ba4\u8bc1\u7684PAM\u6587\u4ef6\u4f4d\u7f6e\uff08\/etc\/pam.d\/\u76ee\u5f55\u4e2d\u5bf9\u5e94\u7684\u6587\u4ef6\u540d\uff09
\nuserlist_enable=NO #\u662f\u5426\u542f\u7528user_list\u7528\u6237\u5217\u8868\u6587\u4ef6
\ntcp_wrappers=YES #\u662f\u5426\u5f00\u542ftcp_wrappers\u4e3b\u673a\u8bbf\u95ee\u63a7\u5236
\nchroot_local_user=YES #\u662f\u5426\u5c06FTP\u672c\u5730 \u7528\u6237\u7981\u9522\u5728\u5bbf\u4e3b\u76ee\u5f55\u4e2d
\nmax_clients=20 #\u9650\u5236\u5e76\u53d1\u5ba2\u6237\u8fde\u63a5\u6570\u6700\u591a\u4e3a20\u4e2a
\nmax_per_ip=2 #\u9650\u5236\u6765\u81ea\u540c\u4e00\u4e2aIP\u7684\u5ba2\u6237\u8fde\u63a5\u6570\u4e3a\u6700\u591a2\u4e2a
\nlocal_max_rate=102400 #\u672c\u5730\u4e0b\u8f7d\u3001\u4e0a\u4f20\u9650\u901f\u4e3a100KB\/s
\npasv_enable=YES #\u5141\u8bb8\u88ab\u52a8\u6a21\u5f0f\u8fde\u63a5
\npasv_min_port=24500 #\u8bbe\u7f6e\u7528\u4e8e\u88ab\u52a8\u8fde\u63a5\u7684\u670d\u52a1\u5668\u6700\u5c0f\u7aef\u53e3\u53f7
\npasv_max_port=24600 #\u8bbe\u7f6e\u7528\u4e8e\u88ab\u52a8\u8fde\u63a5\u7684\u670d\u52a1\u5668\u6700\u5927\u7aef\u53e3\u53f7
\nconnect_from_port_20=YES #\u5141\u8bb8\u670d\u52a1\u5668\u4e3b\u52a8\u6a21\u5f0f\uff08\u4ece20\u7aef\u53e3\u5efa\u7acb\u6570\u636e\u8fde\u63a5\uff09
\ndownload_enable=YES #\u662f\u5426\u5141\u8bb8\u4e0b\u8f7d\u6587\u4ef6\uff08\u5efa\u7acb\u4ec5\u9650\u4e8e\u6d4f\u89c8\u548c\u4e0a\u4f20\u7684\u8bbe\u7f6e\u4e3a\uff2e\uff2f\uff09<\/p>\n

======================================================================================================================
\n===========================\u865a===============\u62df====================\u7528======================\u6237==========================
\n======================================================================================================================<\/p>\n

1\u3001\u5b89\u88c5vsftpd\u548cdb4-utils
\n[root@vsftpd ~]# yum -y install vsftpd db4-utils
\n\u6ce8\u91ca\uff1avsftpd\u662fftp\u670d\u52a1\u7684\u4e3b\u7a0b\u5e8f\u5305\uff1bdb4-utils\u7684\u5ba2\u6237\u7aef\u547d\u4ee4db_load\u53ef\u4ee5\u7528\u6765\u751f\u6210\u7528\u6237\u7684\u6570\u636e\u5e93\u6587\u4ef6<\/p>\n

2\u3001\u5efa\u7acb\u6587\u672c\u683c\u5f0f\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u5217\u8868\u6587\u4ef6
\n\u6ce8\u91ca\uff1a\u5947\u6570\u884c\u4e3a\u7528\u6237\uff0c\u5076\u6570\u884c\u4e3a\u5bc6\u7801
\n[root@vsftpd ~]# cd \/etc\/vsftpd\/
\n[root@vsftpd vsftpd]# cat >> vusers.list << EOF > tom
\n> 123
\n> jerry
\n> 123
\n> Allentuns
\n> 123
\n> EOF<\/p>\n

3\u3001db_load\u5de5\u5177\u5c06\u5217\u8868\u6587\u4ef6\u8f6c\u5316\u4e3aDB\u6570\u636e\u5e93\u6587\u4ef6
\n[root@vsftpd vsftpd]# db_load -T -t hash -f vusers.list vusers.db
\n\u6ce8\u91ca\uff1a\u547d\u4ee4\u7684\u7528\u6cd5
\ndb_load -T\uff08\u8f6c\u6362\uff09 -t hash\uff08\u6307\u5b9a\u8bfb\u53d6\u6570\u636e\u6587\u4ef6\u7684\u57fa\u672c\u65b9\u6cd5\uff09 -f vusers.list\uff08\u521a\u624d\u7684\u5217\u8868\u6587\u4ef6\uff09vusers.db\uff08\u8f6c\u5316\u4e3a\u6570\u636e\u5e93\u6587\u4ef6\uff09<\/p>\n

\u6ce8\u91ca\uff1a\u68c0\u67e5\u662f\u5426\u8f6c\u6362\u6210\u529f
\n[root@vsftpd vsftpd]# file vusers.db
\nvusers.db: Berkeley DB (Hash, version 9, native byte-order)
\n[root@vsftpd vsftpd]# file vusers.list
\nvusers.list: ASCII text<\/p>\n

4\u3001\u5efa\u7acbftp\u8bbf\u95ee\u7684\u6839\u76ee\u5f55\u53ca\u865a\u62df\u7528\u6237\u5bf9\u5e94\u7684\u7cfb\u7edf\u8d26\u53f7
\n[root@vsftpd vsftpd]# mkdir \/var\/ftproot
\n[root@vsftpd vsftpd]# useradd -d \/var\/ftproot\/ -s \/sbin\/nologin virtual
\nuseradd\uff1a\u8b66\u544a\uff1a\u6b64\u4e3b\u76ee\u5f55\u5df2\u7ecf\u5b58\u5728\u3002
\n\u4e0d\u4ece skel \u76ee\u5f55\u91cc\u5411\u5176\u4e2d\u590d\u5236\u4efb\u4f55\u6587\u4ef6\u3002<\/p>\n

5\u3001\u66f4\u6539\u6839\u76ee\u5f55\u7684\u6743\u9650
\n[root@vsftpd vsftpd]# chown virtual:virtual \/var\/ftproot
\n[root@vsftpd vsftpd]# chmod 755 \/var\/ftproot<\/p>\n

6\u3001\u5efa\u7acbpam\u8ba4\u8bc1\u6587\u4ef6
\n[root@vsftpd vsftpd]# cat >> \/etc\/pam.d\/vsftpd.vu << EOF > #%PAM-1.0
\n> auth required pam_userdb.so db=\/etc\/vsftpd\/vusers
\n> account required pam_userdb.so db=\/etc\/vsftpd\/vusers
\n> EOF<\/p>\n

7\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6
\n[root@vsftpd vsftpd]# cp vsftpd.conf vsftpd.conf.bak
\n[root@vsftpd vsftpd]# vim vsftpd.conf
\nanonymous_enable=NO #\u5141\u8bb8\u533f\u540d\u7528\u6237\u8bbf\u95ee\uff08yes\uff0c\u4e3a\u5141\u8bb8\uff0cno\u4e3a\u4e0d\u5141\u8bb8\uff09
\nlocal_enable=YES #\u662f\u5426\u7981\u7528\u672c\u5730\u7528\u6237\uff08\u8bbe\u7f6e\u4e3ano\u662f\u8868\u793a\u7981\u7528\uff0cyes\u8868\u793a\u4e0d\u7981\u7528\uff09
\nwrite_enable=YES #\u5141\u8bb8\u5f00\u653e\u5199\u7684\u6743\u9650
\nanon_umask=022 #\u8bbe\u7f6e\u533f\u540d\u7528\u6237\u4e0a\u4f20\u5efa\u7acb\u6587\u4ef6\u65f6\u7684\u6743\u9650\u63a9\u7801
\ndirmessage_enable=YES #\u7528\u6237\u5207\u6362\u8fdb\u5165\u76ee\u5f55\u65f6\u663e\u793a.message\uff08\u5982\u679c\u5b58\u5728\uff09\u6587\u4ef6\u7684\u5185\u5bb9
\nxferlog_enable=YES #\u5f00\u542fxferlog\u65e5\u5fd7\uff0c\u9ed8\u8ba4\u8bb0\u5f55\u5230\/var\/log\/xferlog\uff09
\nconnect_from_port_20=YES #\u8fde\u63a5\u63a7\u5236\u7aef\u53e3\u4e3a20
\nxferlog_std_format=YES #\u542f\u7528\u6807\u51c6xferlog\u7684\u65e5\u5fd7\u683c\u5f0f\uff0c\u82e5\u7981\u7528\u6b64\u9879\uff0c\u5c06\u4f7f\u7528vsftpd\u81ea\u5df1\u7684\u65e5\u5fd7\u683c\u5f0f
\nlisten=YES #\u662f\u5426\u4ee5\u72ec\u7acb\u8fd0\u884c\u7684\u65b9\u5f0f\u76d1\u542c\u670d\u52a1
\nuserlist_enable=YES #\u672a\u542f\u7528\u672c\u5730\u7528\u6237\u65f6\uff0c\u53ef\u4ee5\u5c06\u7528\u6237\u5217\u8868\u529f\u80fd\u7981\u7528
\ntcp_wrappers=YES #\u662f\u5426\u5f00\u542ftcp_wrappers\u4e3b\u673a\u8bbf\u95ee\u63a7\u5236
\nguest_enable=YES #\u542f\u7528\u7528\u6237\u6620\u5c04\u529f\u80fd
\nguest_username=virtual #\u5c06\u6620\u5c04\u7528\u6237\u6307\u5b9a\u4e3avirtual\uff08\u6211\u4eec\u4e4b\u524d\u521b\u5efa\u7684\u865a\u62df\u7528\u6237\uff09
\npam_service_name=vsftpd.vu #\u8bberoot\u7f6e\u7528\u4e8e\u7528\u6237\u8ba4\u8bc1\u7684PAM\u6587\u4ef6\u4f4d\u7f6e\uff08\/etc\/pam.d\/vsftpd.vu \u76ee\u5f55\u4e2d\u5bf9\u5e94\u7684\u6587\u4ef6\u540d\uff09
\nlocal_root=\/var\/ftproot #\u6307\u5b9aftp\u7684\u8def\u5f84\uff08\u53ef\u4ee5\u81ea\u5df1\u5199\u76ee\u5f55\u8def\u5f84\uff0c\u8981\u6ce8\u610f\u6743\u9650\u548c\u5bbf\u4e3b\uff09<\/p>\n

8\u3001\u91cd\u65b0\u542f\u52a8vsftpd\u670d\u52a1
\n[root@vsftpd vsftpd]# service vsftpd restart
\n\u5173\u95ed vsftpd\uff1a [\u786e\u5b9a]
\n\u4e3a vsftpd \u542f\u52a8 vsftpd\uff1a [\u786e\u5b9a]<\/p>\n

9\u3001\u4e3a\u4e0d\u540c\u7684\u865a\u62df\u7528\u6237\u5efa\u7acb\u72ec\u7acb\u7684\u914d\u7f6e\u6587\u4ef6\uff08\u5206\u914d\u4e0d\u540c\u7684\u6743\u9650\uff09
\n[root@vsftpd ~]# cd \/etc\/vsftpd\/
\n[root@vsftpd vsftpd]# mkdir chroot_list
\n[root@vsftpd vsftpd]# vim chroot_list\/tom
\n#\u4e0a\u4f20\u3001\u521b\u5efa\u6587\u4ef6
\nanon_upload_enable=YES
\nanon_mkdir_write_enable=YES
\nanon_world_readable_only=NO
\nanon_other_write_enable=YES<\/p>\n

10\u3001\u7136\u540e\u518d\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\uff0c\u5728\u91cc\u9762\u6dfb\u52a0\u4e00\u53e5
\n[root@vsftpd vsftpd]# vim vsftpd.conf
\n#\u6307\u5b9a\u7ed9\u7528\u6237\u914d\u7f6e\u6743\u9650\u76ee\u5f55\u7684\u4f4d\u7f6e
\nuser_config_dir=\/etc\/vsftpd\/chroot_list<\/p>\n

11\u3001\u767b\u5f55\u3001\u7528\u6237\u6743\u9650|\u6d4b\u8bd5
\n\u521b\u5efa\u76ee\u5f55\uff0c\u4e0a\u4f20\u6587\u4ef6\uff0c\u5220\u9664\u3001\u91cd\u547d\u540d\uff0c\u4e0b\u8f7d
\n[root@vsftpd mnt]# ftp localhost
\nTrying ::1…
\nftp: connect to address ::1\u62d2\u7edd\u8fde\u63a5
\nTrying 127.0.0.1…
\nConnected to localhost (127.0.0.1).
\n220 (vsFTPd 2.2.2)
\nName (localhost:root): tom
\n331 Please specify the password.
\nPassword:
\n230 Login successful.
\nRemote system type is UNIX.
\nUsing binary mode to transfer files.
\nftp> pwd
\n257 “\/”
\nftp> mkdir upload
\n257 “\/upload” created
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,139,65).
\n150 Here comes the directory listing.
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> lcd \/etc
\nLocal directory now \/etc
\nftp> put fstab
\nlocal: fstab remote: fstab
\n227 Entering Passive Mode (127,0,0,1,249,106).
\n150 Ok to send data.
\n226 Transfer complete.
\n805 bytes sent in 3.8e-05 secs (21184.21 Kbytes\/sec)
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,206,240).
\n150 Here comes the directory listing.
\n-rw——- 1 500 500 805 Jul 20 19:53 fstab
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> mput inittab passwd
\nmput inittab? yes
\n227 Entering Passive Mode (127,0,0,1,223,114).
\n150 Ok to send data.
\n226 Transfer complete.
\n884 bytes sent in 4.1e-05 secs (21560.98 Kbytes\/sec)
\nmput passwd? yes
\n227 Entering Passive Mode (127,0,0,1,254,126).
\n150 Ok to send data.
\n226 Transfer complete.
\n951 bytes sent in 3e-05 secs (31700.00 Kbytes\/sec)
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,170,44).
\n150 Here comes the directory listing.
\n-rw——- 1 500 500 805 Jul 20 19:53 fstab
\n-rw——- 1 500 500 884 Jul 20 19:54 inittab
\n-rw——- 1 500 500 951 Jul 20 19:54 passwd
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> rename passwd password
\n350 Ready for RNTO.
\n250 Rename successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,249,227).
\n150 Here comes the directory listing.
\n-rw——- 1 500 500 805 Jul 20 19:53 fstab
\n-rw——- 1 500 500 884 Jul 20 19:54 inittab
\n-rw——- 1 500 500 951 Jul 20 19:54 password
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> delete inittab
\n250 Delete operation successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,142,175).
\n150 Here comes the directory listing.
\n-rw——- 1 500 500 805 Jul 20 19:53 fstab
\n-rw——- 1 500 500 951 Jul 20 19:54 password
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> mkdir test
\n257 “\/test” created
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,54,117).
\n150 Here comes the directory listing.
\n-rw——- 1 500 500 805 Jul 20 19:53 fstab
\n-rw——- 1 500 500 951 Jul 20 19:54 password
\ndrwx—— 2 500 500 4096 Jul 20 19:55 test
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> rmdir test
\n250 Remove directory operation successful.
\nftp> dir
\n227 Entering Passive Mode (127,0,0,1,99,71).
\n150 Here comes the directory listing.
\n-rw——- 1 500 500 805 Jul 20 19:53 fstab
\n-rw——- 1 500 500 951 Jul 20 19:54 password
\ndrwx—— 2 500 500 4096 Jul 20 19:53 upload
\n226 Directory send OK.
\nftp> lcd \/mnt\/
\nLocal directory now \/mnt
\nftp> mget fstab password upload
\nmget fstab? yes
\n227 Entering Passive Mode (127,0,0,1,230,153).
\n150 Opening BINARY mode data connection for fstab (805 bytes).
\n226 Transfer complete.
\n805 bytes received in 9.8e-05 secs (8214.29 Kbytes\/sec)
\nmget password? yes
\n227 Entering Passive Mode (127,0,0,1,141,146).
\n150 Opening BINARY mode data connection for password (951 bytes).
\n226 Transfer complete.
\n951 bytes received in 5.1e-05 secs (18647.06 Kbytes\/sec)
\nftp> !
\n[root@vsftpd mnt]# ll
\n\u603b\u7528\u91cf 8
\n-rw-r–r– 1 root root 805 7\u6708 21 03:55 fstab
\n-rw-r–r– 1 root root 951 7\u6708 21 03:55 password<\/p>\n

\u5efa\u8bae\u516c\u53f8\u7528\u865a\u62df\u7528\u6237\u505avsftpd\uff0c\u56e0\u4e3a\u865a\u62df\u7528\u6237\u662f\u5728Linux\u7cfb\u7edf\u4e2d\u4e0d\u5b58\u5728\u7684\uff0c\u8fd9\u6837\u589e\u5f3a\u7cfb\u7edf\u7684\u5b89\u5168\u6027vsftpd\u914d\u7f6e\u6587\u4ef6\u7684\u66f4\u591a\u53c2\u6570\uff0c
\n\u5927\u5bb6\u611f\u5174\u8da3\u53ef\u4ee5\u81ea\u5df1\u53bb\u914d\u7f6e\uff0c\u6211\u5199\u7684\u90fd\u662f\u4e00\u4e9b\u57fa\u672c\u7684\u914d\u7f6e\u53c2\u6570<\/p>\n

==========================================vsftpd.conf\u914d\u7f6e\u6587\u4ef6\u6982\u8ff0=======================================================<\/p>\n

\u4e3b\u914d\u7f6e\u6587\u4ef6\uff1a\/etc\/vsftpd\/vsftpd.conf
\n\u533f\u540d\u6743\u9650
\nanon_root \u6307\u5b9a\u533f\u540d\u7528\u6237\u8bbf\u95ee\u76ee\u5f55
\nanonymous_enable \u662f\u5426\u542f\u7528\u533f\u540d\u8bbf\u95ee
\nanon_mkdir_write_enable \u662f\u5426\u5141\u8bb8\u533f\u540d\u7528\u6237\u521b\u5efa\u76ee\u5f55\u7684\u6743\u9650
\nanon_other_write_enalbe \u662f\u5426\u5141\u8bb8\u533f\u540d\u7528\u6237\u5176\u4ed6\u7684\u5199\u5165\u6743\u9650
\nanon_max_rate \u5141\u8bb8\u533f\u540d\u7528\u6237\u6700\u5927\u7684\u4f20\u8f93\u901f\u7387
\nanon_upload_enable \u662f\u5426\u5141\u8bb8\u533f\u540d\u7528\u6237\u4e0a\u4f20
\nanon_umask=022 \u533f\u540d\u7528\u6237\u4e0a\u4f20\u6587\u4ef6\u7684\u9ed8\u8ba4\u6743\u9650<\/p>\n

\u672c\u5730\u7528\u6237\u6743\u9650
\nlocal_root \u6307\u5b9a\u672c\u5730\u7528\u6237\u767b\u9646\u540e\u7684\u5bbf\u4e3b\u76ee\u5f55
\nchroot_local_user \u662f\u5426\u5c06\u7528\u6237\u7981\u9522\u5728\u5bbf\u4e3b\u76ee\u5f55\u4e2d
\nlocal_max_rate \u5141\u8bb8\u672c\u5730\u7528\u6237\u7684\u4f20\u8f93\u901f\u7387
\nlocal_mkdir_write_enable \u662f\u5426\u5141\u8bb8\u672c\u5730\u7528\u6237\u521b\u5efa\u76ee\u5f55\u7684\u6743\u9650
\nlocal_other_write_enable \u662f\u5426\u5141\u8bb8\u672c\u5730\u7528\u6237\u5176\u4ed6\u7684\u5199\u5165\u6743\u9650
\nlocal_enable \u662f\u5426\u542f\u7528\u672c\u5730\u7528\u6237\u8bbf\u95ee
\nlocal_umask \u672c\u5730\u7528\u6237\u4e0a\u4f20\u6587\u4ef6\u7684\u9ed8\u8ba4\u6743\u9650<\/p>\n

\u5168\u5c40\u914d\u7f6e
\nlisten=yes \u662f\u5426\u4ee5\u72ec\u7acb\u7684\u65b9\u5f0f\u76d1\u542c\u670d\u52a1
\nlisten_port=21 \u8bbe\u7f6eFTP\u7684\u4fa6\u542c\u7aef\u53e3
\nwrite_enable \u662f\u5426\u5141\u8bb8\u5199\u5165
\ndownload_enable \u662f\u5426\u5141\u8bb8\u4e0b\u8f7d
\ndirmessage_enable \u7528\u6237\u5207\u6362\u76ee\u5f55\u65f6\u663e\u793a.message\u6587\u4ef6
\nxferlog_enable \u542f\u7528xferlog\u65e5\u5fd7
\nxferlog_std_format \u542f\u7528\u6807\u51c6\u7684xferlog\u65e5\u5fd7
\nconnect_from_port_20 \u5141\u8bb8\u670d\u52a1\u5668\u4ece20\u53f7\u7aef\u53e3\u5efa\u7acb\u4e3b\u52a8\u8fde\u63a5
\npasv_enable \u5141\u8bb8\u670d\u52a1\u5668\u88ab\u52a8\u8fde\u63a5
\npasv_max_port \u8bbe\u7f6e\u7528\u4e8e\u88ab\u52a8\u8fde\u63a5\u7684\u6700\u5927\u7aef\u53e3\u53f7
\npasv_min_port \u8bbe\u7f6e\u7528\u4e8e\u88ab\u52a8\u8fde\u63a5\u7684\u6700\u5c0f\u7aef\u53e3\u53f7
\npam_service_name \u8bbe\u7f6e\u7528\u4e8e\u7528\u6237\u8ba4\u8bc1\u7684pam\u6587\u4ef6\u7684\u4f4d\u7f6e
\nuserlist_enable \u662f\u5426\u542f\u7528user_list\u5217\u8868\u6587\u4ef6
\nuserlist_deny \u662f\u5426\u7981user_list\u5217\u8868\u4e2d\u7528\u6237\u5e10\u53f7
\nmax_clients \u6700\u591a\u5141\u8bb8\u591a\u5c11\u4e2a\u5ba2\u6237\u7aef\u540c\u65f6\u8fde\u63a5
\nmax_per_ip \u5bf9\u6765\u81ea\u540c\u4e00IP\u7684\u5ba2\u6237\u7aef\uff0c\u6700\u591a\u5141\u8bb8\u591a\u5c11\u4e2a\u5e76\u53d1\u8fde\u63a5
\ntcp_wrappers \u662f\u5426\u542f\u7528TCP_wrappers\u4e3b\u673a\u8bbf\u95ee\u63a7\u5236
\nchroot_list_enable=yes
\nchroot_list_file=\/etc\/vsftpd\/chroot_list<\/p>\n

\u865a\u62df\u7528\u6237\u914d\u7f6e
\nguest_enable \u662f\u5426\u542f\u7528\u7528\u6237\u6620\u5c04\u529f\u80fd
\nguest_username \u5c06\u6620\u5c04\u7528\u6237\u6307\u5b9a\u4e3a\u67d0\u4e2a\u7cfb\u7edf\u7528\u6237
\nuser_config_dir \u6307\u5b9a\u865a\u62df\u7528\u6237\u914d\u7f6e\u76ee\u5f55\u4f4d\u7f6e<\/p>\n

=======================================================================================================================================
\n=======================================================================================================================================
\n=======================================================================================================================================
\n#!\/bin\/bash
\n# Allentuns-\u90d1\u5f66\u751f
\n# time 2014-07-20<\/p>\n

#\u53cd\u590d\u5b89\u88c5\u540e\uff0c\u518d\u6b21\u5b89\u88c5\u5220\u9664\u8def\u5f84\u6587\u4ef6
\nyum -y remove vsftpd
\nrm -rf \/etc\/init.d\/vsftpd
\nrm -rf \/etc\/vsftpd
\nrm -rf \/etc\/pam.d\/vsftpd.vu
\nrm -rf \/var\/ftproot
\nuserdel -r virtual<\/p>\n

#\u5173\u95ed\u9632\u706b\u5899\u548cselinux
\nservice iptables stop
\nchkconfig iptables off
\nsetenforce 0<\/p>\n

#\u5b89\u88c5vsftpd\u548cdb4\u5305
\nyum -y install vsftpd db4-utils
\nyum -y install ftp<\/p>\n

#\u6bcf\u6b21\u5b89\u88c5\u524d\u5bf9\u539f\u6587\u4ef6\u8fdb\u884c\u4e00\u4e2a\u6253\u5305
\n#tar -cPf \/root\/vsftpd_bak.tar.gz \/etc\/vsftpd<\/p>\n

#\u521b\u5efa\u7528\u6237\u5217\u8868\u6587\u4ef6
\n#\u5947\u6570\u884c\u4e3a\u8d26\u6237\uff0c\u5076\u6570\u884c\u4e3a\u5bc6\u7801
\ncd \/etc\/vsftpd
\ncat > vusers.list << EOF tom 123456 jerry 123456 Allentuns 123456 EOF #\u751f\u6210db\u6570\u636e\u5e93\u6587\u4ef6 db_load -T -t hash -f vusers.list vusers.db #\u521b\u5efa\u865a\u62df\u7528\u6237\u6839\u76ee\u5f55 mkdir \/var\/ftproot #\u521b\u5efa\u865a\u62df\u7528\u6237 \u4e0d\u5141\u8bb8\u767b\u5f55\u7cfb\u7edf useradd -d \/var\/ftproot\/ -s \/sbin\/nologin virtual &> \/dev\/null
\n#\u66f4\u6539\u6587\u4ef6\u5c5e\u6027\u3001\u6743\u9650
\nchown virtual:virtual \/var\/ftproot
\nchmod 755 \/var\/ftproot<\/p>\n

#\u521b\u5efapam\u6587\u4ef6
\ncat > \/etc\/pam.d\/vsftpd.vu << EOF #%PAM-1.0 auth required pam_userdb.so db=\/etc\/vsftpd\/vusers account required pam_userdb.so db=\/etc\/vsftpd\/vusers EOF #\u521b\u5efa\u865a\u62df\u7528\u6237\u6743\u9650\u6587\u4ef6 cp vsftpd.conf vsftpd.conf.bak mkdir chroot_list cat > chroot_list\/tom << EOF anon_upload_enable=YES anon_mkdir_write_enable=YES anon_world_readable_only=NO anon_other_write_enable=YES EOF #\u6307\u660e\u7528\u6237\u5217\u8868\u6587\u4ef6 sed -i ‘s\/pam_service_name=vsftpd\/pam_service_name=vsftpd.vu\/’ vsftpd.conf cat >> vsftpd.conf << EOF
\nguest_enable=YES
\nguest_username=virtual
\nlocal_root=\/var\/ftproot
\nuser_config_dir=\/etc\/vsftpd\/chroot_list
\nEOF
\nsed -i ‘s\/anonymous_enable=YES\/anonymous_enable=NO\/’ \/etc\/vsftpd\/vsftpd.conf<\/p>\n

#\u542f\u52a8\u670d\u52a1
\n\/etc\/init.d\/vsftpd restart
\necho “iptables is stop and selinux is disabled”
\necho “vsftpd Successfully installed and service startup”
\n<\/code>
\n\u5de5\u4f5c\u4e2d\u9047\u5230\u7684\u4e00\u4e9b\u95ee\u9898\uff0c\u5c24\u5176\u662f\u88ab\u52a8\u6a21\u5f0f\uff0c\u5728\u8c03\u8bd5\u9632\u706b\u5899\u7684\u65f6\u5019\u683c\u5916\u7684\u9ebb\u70e6\uff0c\u501f\u6b64\u501f\u7528\u670b\u53cb\u535a\u5ba2\u7684\u622a\u56fe\u7528\u4ee5\u5206\u6790\u4e3b\u52a8\u6a21\u5f0f\u548c\u88ab\u52a8\u6a21\u5f0f\u7684\u533a\u522b<\/p>\n

\"\"
\n\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

http:\/\/web.mit.edu\/rhel-doc\/4\/RH-DOCS\/rhel-rg-en-4\/s1-f […]<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-4316","post","type-post","status-publish","format-standard","hentry","category-4","category-4-id","post-seq-1","post-parity-odd","meta-position-corners","fix"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4316"}],"version-history":[{"count":3,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4316\/revisions"}],"predecessor-version":[{"id":4321,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4316\/revisions\/4321"}],"wp:attachment":[{"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.icocean.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}