|
|
|
[画像:[Photo of the Author]]
by Mario M. Knopf <netzmeister/at/neo5k/dot/org> 購噐恬宀: Mario 參脱噐 Linux、利大才凪万芦畠屢購議三籾葎赤。壓匍噫扮寂?麿略擦彭曾倖利嫋?neo5k.org 才 linuxwallpapers.de. 朕村: |
姜勣:
宸鐙猟嫗頁"Very Secure FTP Daemon" 議児云初府。遍枠?厘氏間待仇初府 FTP 才 vsftpd。岻朔?厘断繍氏僥楼 vsftp 便擦殻會?deamon?議芦廾、譜崔才尼強歌方。恷朔?厘断珊勣序佩匯倖弌弌議孔嬬霞編。
FTP 議銭俊陣崙聞喘 TCP ?Transmission Control Protocol, 勧補陣崙亅咏??万隠嬾阻方象議辛真勧補。咀緩?FTP 壓方象勧補嶄音俶勣購伉蛍怏卿払才方象危列殊霞。咀葎 TCP 隠嬾阻耽倖蛍怏脅梓孚乏會議、短嗤危列議、涙嶷鹸議欺器。
FTP 嶄功象窟僕圭塀議音揖蛍葎嗤眉嶽音揖議勧補窃侏?送(stream)庁塀參 end-of-file (EOF) 炎崗勧補議潤崩?総曾嶽勧補庁塀參 end-of-record (EOR) 栖炎崗勧補議潤崩
総翌珊嗤曾嶽音揖議勧補庁塀:
ASCII 庁塀喘噐猟云猟周議勧補?遇屈序崙庁塀喘噐殻會才窃貌議方象議勧補。喘薩音俶勣僉夲蒙協議勧補庁塀?孖壓侭嗤議人薩極脅辛參紛艶勧補議猟周議窃侏徭強俳算庁塀。
授幡喘議喘薩兆才畜鷹脅頁聞喘苧猟勧補議?宸頁匯倖掲械冢嶷議芦畠咨纂。宸匆頁匯乂嗤購FTP議芦畠議深打議竃窟泣。1997 定10埖?RFC2228[2] 嶮噐窟下阻?万協吶阻 FTP 議芦畠來温割号袈。
vsftpd 議兆忖旗燕"very secure FTP daemon", 芦畠頁万議蝕窟宀 Chris Evans 深打議遍勣諒籾岻匯。壓宸倖 FTP 捲暦匂譜柴蝕窟議恷蝕兵議扮昨?互芦畠來祥頁匯倖朕炎。
匯倖箭徨祥頁 vsftpd 頁壓 chroot 庁塀和垢恬議?chroot 庁塀祥頁葎殻會?宸戦祥頁 vsftpd 阻?汽鏡峺協匯倖仟議朕村?万匆祥音嬬恵諒椎倖朕村岻翌議殻會才猟周阻 --- 侭參宸匆各葎^瓜迄貧議 ?。匯倖辛嬬瓜捻壓議好似宀篤撒議 FTP 捲暦匂繍瓜貫狼由議凪麿何蛍鏡羨蝕栖?貫遇閲窒阻厚寄議鱒払。嗤購 chroot 議厚謹佚連辛參壓和円議猟嫗[3]嶄誼欺。泌惚艇斤噐 vsftpd 議凪麿芦畠字崙嗤佶箸?容呪堋響猟嫗 [4]。
喇噐嗤阻泌緩謹議蒙來?凪嶄 FTP 捲暦議芦畠來哘乎頁恷嶷勣議?vsftpd 曳凪麿 FTP 捲暦匂厚紗單埆。WU-FTPD[5] 壓宸戦辛參瓜篇恬匯倖郡中議箭徨?咀葎万壓狛肇議叱定嶄竃孖阻湊謹議芦畠髪尣。
誼欺坿旗鷹旺盾蝕 tarball 朔?序秘仟秀議朕村朕村旺塰佩 make。和中頁駅勣議凋綜議幣箭?
neo5k@phobos> tar xzvf
vsftpd-x.x.x.tar.gz
neo5k@phobos> cd vsftpd-x.x.x
neo5k@phobos> make
neo5k@phobos> mkdir /var/ftp
neo5k@phobos> useradd -d /var/ftp ftp
neo5k@phobos> chown root.root /var/ftp
neo5k@phobos> chmod og-w /var/ftp
neo5k@phobos> make install
殻會才 manpage 哘乎厮将瓜申唄欺狼由嶄議屎鳩議了崔阻。泌惚竃孖阻呟械秤趨?醍軍匯泣議返垢申唄匆辛參頼撹宸?垢恬。neo5k@phobos> cp vsftpd /usr/sbin/vsftpd
neo5k@phobos> cp vsftpd.conf.5 /usr/share/man/man5
neo5k@phobos> cp vsftpd.8 /usr/share/man/man8
neo5k@phobos> cp vsftpd.conf /etc
# Comment line
# Anonymus FTP-access permitted?
YES/NO
anonymous_enable=NO
# Permit anonymus upload? YES/NO
anon_upload_enable=NO
# Permission for anonymus users to make new directories?
YES/NO
anon_mkdir_write_enable=NO
# Permission for anonymus users to do other write operations
- like renaming or deleting? YES/NO
anon_other_write_enable=NO
# Log on by local users permitted? YES/NO
local_enable=YES
# Shall local users be locked into their home directory?
YES/NO
chroot_local_user=YES
# Highest permitted data transfer rate in bytes per second
for local logged on users. Default = 0 (unlimited)
local_max_rate=7200
# General write permission? YES/NO
write_enable=YES
# Enable messages when changing directories? YES/NO
dirmessage_enable=YES
# Welcome banner at users logon.
ftpd_banner="Welcome to neo5k's FTP service."
# Activate logging? YES/NO
xferlog_enable=YES
# Logging of all FTP activities? YES/NO
# Careful! This can generate large quantities of
data.
log_ftp_protocol=NO
# Confirm connections are established on port 20 (ftp data)
only. YES/NO
connect_from_port_20=YES
# Timeout during idle sessions
idle_session_timeout=600
# Data connection timeout
data_connection_timeout=120
# Access through Pluggable Authentication Modules
(PAM)
pam_service_name=vsftpd
# Standalone operation? YES/NO - depending on operation mode
(inetd, xinetd, Standalone)
# The author's FTP service is being startet with xinetd,
therefore the value here is NO.
listen=NO
neo5k@phobos> vi /etc/inetd.conf
# ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd ftp stream tcp nowait root /usr/sbin/tcpd vsftpd
![画像:[LinuxFocus-icon]](/index.cgi/contrast/http://linuxfocus.org/ChineseGB/July2004/../../common/images/logolftop_319x45.gif){kind=link}
# vsftp daemon.
service ftp
{
disable = no
socket_type = stream
wait = no
user = root
server = /usr/sbin/vsftpd
per_source = 5
instances = 200
no_access = 192.168.1.3
banner_fail = /etc/vsftpd.busy_banner
log_on_success += PID HOST DURATION
log_on_failure += HOST
nice = 10
}
# Shall the vsftp daemon run in standalone
operation? YES/NO
listen=YES
neo5k@phobos> /usr/sbin/vsftpd &
泌惚殻會塰佩揃抄議譜崔頁屎鳩議?和中議凋綜祥辛參尼強捲暦匂阻neo5k@phobos> vsftpd &
斤噐朔匯嶽圭塀?厘断辛參宸劔心揃抄譜崔頁倦屎鳩neo5k@phobos> echo $PATH
/usr/sbin:/bin:/usr/bin:/sbin:/usr/X11R6/bin
neo5k@phobos> ftp phobos Connected to phobos 220 "Welcome to neo5k's FTP service." Name (phobos:neo5k): testuser 331 Please specify the password. Password: 230 Login successful Remote system type is UNIX. Using binary mode to transfer files. ftp> ls -l 229 Entering Extended Passive Mode 150 Here comes the directory listing drwxr-xr-x 11 500 100 400 May 07 16:22 docs drwxr-xr-x 9 500 100 464 Feb 01 23:05 hlds drwxr-xr-x 39 500 100 4168 May 10 09:15 projects 226 Directory send OK. ftp>
輝隼?宸倖初府叙叙頁斤 vsftpd 戻工議桟廠議匯導?宸倖 FTP 捲暦匂珊戻工阻寄楚議辛工譜崔議僉?。泌惚低?勣厚序匯化冩梢 vsftpd 議三?哘乎恵諒?朕議麼匈[6]旺堋響厚序匯化議猟亀。
|
麼匈喇LinuxFocus園辞怏略擦
© Mario M. Knopf, FDL LinuxFocus.org |
鍬咎佚連:
|
2004年07月10日, generated by lfparser version 2.46