VSFTP服务搭建

meinvwudi

VSFTP服务关键配置
1.关匿名用户
2.启用IP4.
3.限制所有用户逃出家目录
4.家目录可写

# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=NO
#
# Uncomment this to allow local users to log in.
# When SELinux is enforcing check for SE bool ftp_home_dir
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES

chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list

pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
listen_port=1121
pasv_address=120.55.90.227
pasv_enable=YES
pasv_min_port=5555
pasv_max_port=5566

allow_writeable_chroot=YES

meinvwudi

用户创建

useradd -s /sbin/nologin -g ftp testftp
echo "abcdef" |passwd --stdin testftp

meinvwudi

vi /etc/pam.d/vsftpd
注释掉/etc/pam.d/vsftpd文件里这一行：
#auth required pam_shells.so