Centos: ftp服务器

た入场券 2023-06-12 04:15 20阅读 0赞

*  linux 挂载ftp目录：

#从ubuntu 客户机，挂载centos6的ftp目录
    mkdir /home/wang/ftp
    sudo apt install curlftpfs
    sudo curlftpfs ftp://ftp1:123456@cent6:/  /home/wang/ftp -o rw,allow_other,uid=0,gid=0,codepage=utf8
    #sudo umount /home/wang/ftp 
    
    [wang@controller:~]$  ls ftp/
    a.html  derby.log  jars         look        others  pwd.txt        sh         windows-packs
    
    # 设置开机挂载
    cat >> /etc/fstab <<EOF curlftpfs#ftp1:123456@cent6/ /home/wang/ftp2 fuse rw,allow_other,uid=0,gid=0,codepage=utf8,allow_other 0 0 EOF
    sudo mount -a #测试是否可以正常挂载

*  windows　挂载ftp目录( 我的电脑: 映射网络驱动 —> 连接到可用于存储文档和图片的网站)  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70]

# 1, Centos7安装配置vsftpd #

## 1, 安装vsftpd服务 ##

默认的匿名登陆, 用户只允许下载文件, 无写权限 (登陆后，目录为/var/ftp/)

#1, 防火墙设置
    firewall-cmd  --permanent --add-service=ftp
    firewall-cmd  --reload
    sed -i /SELINUX/s/=enforcing/=disabled/  /etc/selinux/config 
    setenforce 0
    
    #2, 安装并启动服务
    yum -y install vsftpd  #目前的版本为3.0
    systemctl enable vsftpd 
    systemctl start vsftpd 
    
    #3,查看默认的配置：/etc/vsftpd/vsftpd.conf
    anonymous_enable=YES
    local_enable=YES
    write_enable=YES
    local_umask=022
    dirmessage_enable=YES# 
    xferlog_enable=YES
    connect_from_port_20=YES
    xferlog_std_format=YES
    listen=NO
    listen_ipv6=YES
    pam_service_name=vsftpd
    userlist_enable=YES
    tcp_wrappers=YES

## 2, 修改配置，本地用户有写权限 ##

*  需求和说明：  
    匿名用户只有下载权限  
    本地用户验证: 有写权限 (登陆后，根目录设置为家目录)  
    使用 chroot\_list\_enable=YES 表示启动<用户禁用列表>

### 报错和解决 ###

*  Vsftpd本地用户不能登陆的解决方法: (解决：修改文件 /etc/pam.d/vsftpd, 注释掉这行auth required pam\_shells.so ）
 *  500 OOPS: run two copies of vsftpd for IPv4 and IPv6: ipv4, ipv6不能同时监听(解决：listen=NO,listen\_ipv6=YES)
 *  500 OOPS: refusing to run with writable root inside chroot() : ((解决：allow\_writeable\_chroot=YES)

#1, 添加测试用户
    useradd ftp1 -s /sbin/nologin  -d /home/mypacks/  #指定ftp登陆后的目录地址
    echo ftp1pass | passwd --stdin  ftp1
    
    useradd ftp2 -s /sbin/nologin
    echo ftp2pass | passwd --stdin  ftp2
    
    #2, 修改配置
    mv /etc/vsftpd/vsftpd.conf  /etc/vsftpd/vsftpd.conf.bak
    cat >/etc/vsftpd/vsftpd.conf <<EOF anonymous_enable=YES local_enable=YES chroot_local_user=YES chroot_list_enable=NO allow_writeable_chroot=YES write_enable=YES local_umask=022 dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES xferlog_std_format=YES #ipv4, ipv6不能同时监听 listen=NO listen_ipv6=YES pam_service_name=vsftpd tcp_wrappers=YES userlist_enable=YES #使用启用：禁用列表 #默认/etc/vsftpd/user_list为禁用列表, 可以设置userlist_deny=NO表示此文件为启用列表 EOF
    
    #3,重启服务
    sed -i /pam_shells.so/s/^/#/ /etc/pam.d/vsftpd 
    systemctl restart vsftpd

### ftp命令行, 验证登陆 ###

yum -y install ftp 
    [root@node1 vsftpd]# ftp 
    ftp> open 
    (to) localhost
    Trying ::1...
    Connected to localhost (::1).
    220 (vsFTPd 3.0.2)
    Name (localhost:root): ftp2
    331 Please specify the password.
    Password:
    230 Login successful.
    Remote system type is UNIX.
    Using binary mode to transfer files.
    
    ftp> mput vsftpd.conf
    mput vsftpd.conf? y
    229 Entering Extended Passive Mode (|||16617|).
    150 Ok to send data.
    226 Transfer complete.
    483 bytes sent in 4.5e-05 secs (10733.33 Kbytes/sec)
    
    ftp> ls
    229 Entering Extended Passive Mode (|||57168|).
    150 Here comes the directory listing.
    -rw-r--r--    1 0        0               8 Oct 31 06:36 a.txt
    -rw-r--r--    1 1001     1001          483 Oct 31 06:38 vsftpd.conf
    226 Directory send OK.
    
    ftp> dir
    229 Entering Extended Passive Mode (|||54472|).
    150 Here comes the directory listing.
    -rw-r--r--    1 0        0               8 Oct 31 06:36 a.txt
    -rw-r--r--    1 1001     1001          483 Oct 31 06:38 vsftpd.conf
    226 Directory send OK.
    ftp> pwd
    257 "/"
    
    ftp> cd /bin
    550 Failed to change directory.
    
    ftp> delete a.txt
    250 Delete operation successful.

# 2, Centos6安装配置vsftpd #

#1, 添加测试用户
    useradd ftp1 -s /sbin/nologin -d /home/mypacks   #指定ftp登陆后的目录地址
    echo ftp1pass | passwd --stdin  ftp1
    
    #2, 防火墙设置
    cat >> /etc/sysconfig/iptables-config<<EOF IPTABLES_MODULES="ip_conntrack_ftp" IPTABLES_MODULES="ip_nat_ftp" EOF
    iptables  -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
    iptables -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --sport 20 -j ACCEPT
    iptables -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    service iptables save; service iptables restart
    sed -i /SELINUX/s/=enforcing/=disabled/  /etc/selinux/config 
    setenforce 0
    
    #3, 安装并启动服务
    yum -y install vsftpd   ftp #目前的版本为2.2
    service  vsftpd  start
    chkconfig vsftpd on

## 2, 修改配置，本地用户有写权限 ##

cp   /etc/vsftpd/vsftpd.conf    /etc/vsftpd/vsftpd.conf .bak
    cat  > /etc/vsftpd/vsftpd.conf <<EOF anonymous_enable=YES local_enable=YES chroot_local_user=YES chroot_list_enable=NO #allow_writeable_chroot=YES write_enable=YES local_umask=022 dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES xferlog_std_format=YES #ipv4, ipv6不能同时监听 listen=YES listen_ipv6=NO pam_service_name=vsftpd tcp_wrappers=YES userlist_enable=YES #使用启用：禁用列表 #默认/etc/vsftpd/user_list为禁用列表, 可以设置userlist_deny=NO表示此文件为启用列表 #开启被动模式 pasv_enable=YES pasv_min_port=30000 pasv_max_port=30099 EOF
    
    #重启服务
    sed -i /pam_shells.so/s/^/#/ /etc/pam.d/vsftpd 
    service vsftpd restart
    
    #开放端口
    iptables -I INPUT -p tcp  --dport 30000:30099  -j ACCEPT
    service iptables save

### ftp命令行, 验证登陆 ###

[ wang@controller:~]$ ftp windows
    Connected to eadage.
    220 (vsFTPd 2.2.2)
    Name (windows:wang): ftp1
    331 Please specify the password.
    Password:
    230 Login successful.
    Remote system type is UNIX.
    Using binary mode to transfer files.
    ftp> ls
    200 PORT command successful. Consider using PASV.
    150 Here comes the directory listing.
    drwxr-xr-x    2 0        0            4096 Oct 31 07:48 iso
    drwxr-xr-x    3 0        0            4096 Oct 30 02:20 jars
    drwxr-xr-x    6 0        0            4096 Oct 22 06:37 linux-packs
    -rw-r--r--    1 0        0            1365 Oct 12 04:13 look
    -rw-r--r--    1 0        0             707 Oct 10 02:29 nginx.conf
    drwxr-xr-x    6 0        0            4096 Sep 29 04:18 others
    226 Directory send OK.
    
    ftp> put a.html
    local: a.html remote: a.html
    200 PORT command successful. Consider using PASV.
    150 Ok to send data.
    226 Transfer complete.
    577 bytes sent in 0.02 secs (34.5755 kB/s)
    
    ftp> get look
    local: look remote: look
    200 PORT command successful. Consider using PASV.
    150 Opening BINARY mode data connection for look (1365 bytes).
    226 Transfer complete.
    1365 bytes received in 0.01 secs (205.3308 kB/s)

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70]: /images/20230531/4e377ec6b25849dd88167426a4668343.png