Tag Info

Hot answers tagged

28

Here's the document I refer people to so that they can following the FTP protocol: http://slacksite.com/other/ftp.html To do active-mode FTP, you need to allow incoming connections to TCP port 21 and outgoing connections from port 20. To do passive-mode FTP, you need to allow incoming connections to TCP port 21 and incoming connections to a ...


24

To configure passive mode for vsftpd you need to set some parameters in vsftpd.conf. pasv_enable=Yes pasv_max_port=10100 pasv_min_port=10090 This enables passive mode and restricts it to using the ten ports for data connections. This is useful as you need to open these ports on your firewall. iptables -I INPUT -p tcp --destination-port 10090:10100 -j ...


10

What you need to use is a combo of user_config_dir and local_root. In the main config file /etc/vsftpd/vsftp.conf you have an entry like: chroot_local_user=YES user_config_dir=/etc/vsftpd/users Inside that directory (/etc/vsftpd/users) you have a config file with the same name as the user ($USER in your case), and inside that file you have: ...


10

Yes. Configure the vsftp server to listen only on 127.0.0.1: this can be done in the vsftp.conf file: listen_address 127.0.0.1 To use this parameter, the server needs to be in standalone mode: listen yes If you want to use IPv6, use these entries instead: listen_ipv6 yes listen_address6 ::1 This is the same as the first, but uses IPv6. You'll ...


9

What you are after is not pinning, but holding. Holding a package can be achieved with echo vsftpd hold | dpkg --set-selections See Ubuntu Pinning Howto Edit: as for the original question it would probably be easiest to uninstall whatever version is there and download the version you need from Ubuntu Main pool and install it with dpkg -i. Afterwards ...


9

To enable passive mode, set the following configuration options in your vsftp.conf: pasv_enable=YES pasv_min_port=41361 pasv_max_port=65534 pasv_address=xxx.xxx.xxx.xxx You can of course change the start and end port, and should replace the xxx's with the public IP of your server. In addition, you should open the passive mode port range in your firewall. ...


8

You want to use the usermod command. You are going to want to use the -m and -d directives to modify their home directory. -d, --home HOME_DIR The users new login directory. If the -m option is given, the contents of the current home directory will be moved to the new home directory, which is created if it does not ...


8

Check here for VSFTPD's FAQ for the answer your looking for. Below is the important excerpt that I think will answer your question. Q) Help! What are the security implications referred to in the "chroot_local_user" option? A) Firstly note that other ftp daemons have the same implications. It is a generic problem. The problem isn't too severe, but it is ...


6

DISCLAIMER: Enabling root login for FTP is a Very Bad Idea for many, many reasons. Edit your vsftpd.conf file, and add the following line: userlist_deny=YES Edit user_list and ftpusers and comment out "root".


6

Here are the steps you should take to set this up: VSFTPd Create the /etc/vsftd.conf file #nano /etc/vsftpd.conf listen=YES anonymous_enable=NO local_enable=YES dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES chroot_local_user=YES secure_chroot_dir=/var/run/vsftpd pam_service_name=vsftpd rsa_cert_file=/etc/ssl/certs/vsftpd.pem ...


6

You can try this: monit: check process without pidfile check process vsftpd matching vsftpd start program = "/etc/init.d/vsftpd start" stop program = "/etc/init.d/vsftpd stop" Alternatively you can follow the guide I put together using aforementioned init file. Created RPM to keep the system consistent across updates (via fpm). New init file has ...


6

logon to webmin then, Webmin > Webmin configuration > Webmin Modules > (check) Third party module from ... then click buton labeled "..." find VSFTPD module on the list. click the module name. it will give you the module installation link in main window. then install... but, that module may be is not providing more options for vsftpd. i think you will use ...


6

Easiest way to do it would be to set the directory's group to the group you want, and then set the sticky group bit on the directory with chmod g+s.


6

Sure - put the bind mount in your /etc/fstab. Device is your source directory, mount point is your mount point, and the type is 'bind'. Something like this: /var/www/html/ /home/ftp_user/html/ bind rw,bind 0 0


6

Your VPS runs on OpenVZ, a container based "virtualization" which has no support for SELinux. If you need SELinux, you will need to switch to another hypervisor which supports SELinux in guests, such as Hyper-V, VMware, KVM, Xen, and possibly others.


6

This is likely caused by a stale pid file. The specifics will vary by distribution.


5

vi /etc/pam.d/vsftp comment #auth required pam_shells.so and then service vsftpd restart pam_shells.so means that only users with shells access should be allowed so that's why needs to be commented.


5

No, Vsftpd does not require Apache to work.


5

sftp-server (SSH File Transfer Protocol) is not a part of ftp. It's a part of OpenSSH. You can turn it off in your ssh-config, usually in /etc/ssh/sshd_config. Change the binary loaded to handle the sftp-sessions: Subsystem sftp /bin/false Don't forget to restart your sshd after the change: /etc/init.d/sshd restart


5

First, you'll have to make the /home/html directory the home directory of the user liam. To do this, execute the following as root: # usermod -d /home/html liam You then need to set chroot_local_user=YES in the vsftpd config file. There is a security aspect to using this setting, as described in this serverfault question.


5

You need to tell your client to transfer in binary mode.


4

The problem is related to the fact that Passive FTP uses ports other than 20 and 21. Read about it here: http://slacksite.com/other/ftp.html Usually I will setup a port range in the vsftpd.conf file for the Passive FTP and then open these ports on the firewall. Also, I'm mostly a freebsd guy but I'm pretty sure there is a way on linux to dynamically open ...


4

If you would bother to open a man page for vsftpd.conf, you would find the following option: hide_file This option can be used to set a pattern for filenames (and directory names etc.) which should be hidden from directory listings. Despite being hidden, the files / directories etc. are fully accessible to clients who know what names to actually ...


4

Edit /etc/sysconfig/iptables-config and add this line: IPTABLES_MODULES="ip_conntrack_ftp" Save it and restart iptables. That's because passive mode use non standard ports to communicate, so you need to keep trak of the ftp connections and iptables will allow them when necessary.


4

You may want to add ip_nat_ftp to your list aswell as making sure everything is being loaded with using the command lsmod Is that a home server, from some internet provider ? if so you may be having a common issue where usually internet providers block ports from 1 to 1024 from their residential users so they dont create home servers (this approch is used ...


4

CentOS 5.5 should have filesystem ACLs on by default, just use setfacl to give 'ftpuser' the rights: setfacl -R -m u:ftpuser:rwx /var/www/myWebApp See the man page for setfacl/getfacl if you've never used them before.


4

In vsftpd.conf add: userlist_enable=YES userlist_file=/etc/vsftpd.userlist userlist_deny=NO Edit the file to contain a username per row.


4

Create a group (groupadd)... chgrp of the directory to that new group... and then add each user to that group. That's the easiest way. You may also want to chmod g+s on the directory to make sure that new files are created with the same group as the parent directory. tadaa!


4

As @cyberx86 said, vsftpd is sending the instance's internal IP address as the address the client must connect to in response to the PASV command, which the client can't connect to since it isn't running inside EC2. You need to use the pasv_address configuration option to tell vsftpd what the public IP of the instance is.


4

The problem is that you can't both use local accounts and also disable those accounts from shell login. If you set their login shell to /bin/nologin, it won't let you login with vsftpd either. A better and more secure FTP daemon would be Pure-ftpd. Look it up, it's available from the EPEL repository, and it allows to create virtual users. The server uses a ...



Only top voted, non community-wiki answers of a minimum length are eligible