ubuntu 16 VSFTP 架設

root@myserverftp:~# sudo apt-get update
root@myserverftp:~# sudo apt-get install vsftpd
root@myserverftp:/home/myserver# service vsftpd restart
root@myserver-ftp:/etc# vi vsftpd.conf

listen=YES

Run standalone with IPv6?

Like the listen parameter, except vsftpd will listen on an IPv6 socket

instead of an IPv4 one. This parameter and the listen parameter are mutually

exclusive.

#listen_ipv6=YES
#

Allow anonymous FTP? (Beware - allowed by default if you comment this out).

anonymous_enable=NO
#

Uncomment this to allow local users to log in.

local_enable=YES
#

Uncomment this to enable any form of FTP write command.

write_enable=YES
#

Default umask for local users is 077. You may wish to change this to 022,

if your users expect that (022 is used by most other ftpd's)

local_umask=022

dirmessage_enable=YES

use_localtime=YES
#

Activate logging of uploads/downloads.

xferlog_enable=YES
#

Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES

access.

secure_chroot_dir=/var/run/vsftpd/empty
#

This string is the name of the PAM service vsftpd will use.

pam_service_name=ftp
#

This option specifies the location of the RSA certificate to use for SSL

encrypted connections.

rsa_cert_file=/etc/ssl/private/vsftpd.pem

2、配置
root@myserver-ftp:~#groupadd scan1
root@myserver-ftp:~#useradd -G scan1 -d /home/scan1 -M ftpscan
root@myserver-ftp:~#useradd -G scan1 -d /home/scan1 -M ftpscan2
root@myserver-ftp:~#chown ftpscan:ftpscan /home/scan1/
root@myserverftp:~# chmod -R 755 /home/scan1/
root@myserverftp:~# fdisk -l
root@myserverftp:~# blkid /dev/sda5 查找到UUID
root@myserverftp:~# vi /etc/fstab
UUID=d71005bf-3bd2-46d6-a7be-3af47f76fad3 /home/scan1 ext4 defaults 0 2

3、530 Login incorrect錯誤的解決方法
1、vsftp 提示 530 Login incorrect錯誤的解決方法

只需要把/etc/pam.d/vsftpd文件中的

auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed

這一句注釋掉就OK了。前面加一個#好

重啟vsftpd服務。問題解決

4、雙網卡配置

root@myserver-ftp:/etc# vim /etc/network/interfaces
auto lo
iface lo inet loopback
auto etho
iface lo inet loopback
auto eth2
iface lo inet loopback
up route add -net 192.168.0.0 netmask 255.255.0.0 gw 192.168.23.1
up route add -net 10.0.0.0 netmask 255.255.0.0 gw 10.0.16.1

root@myserver-ftp:~# route delete default
root@myserver-ftp:~# route add -net 192.168.0.0 netmask 255.255.0.0 dev eth0
root@myserver-ftp:~# route add -net 10.0.0.0 netmask 255.0.0.0 dev eth2
root@myserver-ftp:~# route add -net 192.168.0.0 netmask 255.255.0.0 gw 192.168.23.1

××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××
2017 12 TEST UBUNTU 16.0

root@myserverftp:~# sudo apt-get install vsftpd
root@myserverftp:/home/myserver# sudo service vsftpd restart
第二步：新建目錄/home/scan1/作為用戶主目錄
sudo mkdir /home/scan1/

root@myserver-ftp:~#groupadd scan1
第三步：新建用戶uftp，制定用戶主目錄和所用shell，并設置密碼
root@cmk-GA-880GM-D2H:/home# useradd -G scan1 -d /home/scan1/ -M mis -s /bin/bash
root@cmk-GA-880GM-D2H:/home# passwd mis
輸入新的 UNIX 密碼：
再次輸入新的 UNIX 密碼：
passwd：密碼已成功地變更
root@cmk-GA-880GM-D2H:~# useradd -G scan1 -d /home/scan1/ -M mis2 -s /bin/bash
root@cmk-GA-880GM-D2H:~# passwd mis2
輸入新的 UNIX 密碼：
再次輸入新的 UNIX 密碼：
passwd：密碼已成功地變更
第四步：新建文件/etc/vsftpd.user_list，用于存放允許訪問ftp的用戶：
root@cmk-GA-880GM-D2H:/home# vi /etc/vsftpd.user_list
mis
mis2
root@cmk-GA-880GM-D2H:/home# vi /etc/vsftpd.conf

Run standalone? vsftpd can run either from an inetd or as a standalone

daemon started from an initscript.

listen=YES
#

Run standalone with IPv6?

Like the listen parameter, except vsftpd will listen on an IPv6 socket

instead of an IPv4 one. This parameter and the listen parameter are mutually

exclusive.

#listen_ipv6=YES
#

Allow anonymous FTP? (Disabled by default)

anonymous_enable=NO
#

Uncomment this to allow local users to log in.

local_enable=YES
#

Uncomment this to enable any form of FTP write command.

write_enable=YES
#

Default umask for local users is 077. You may wish to change this to 022,

if your users expect that (022 is used by most other ftpd's)

local_umask=022

Activate directory messages - messages given to remote users when they

go into a certain directory.

dirmessage_enable=YES
#

If enabled, vsftpd will display directory listings with the time

in your local time zone. The default is to display GMT. The

times returned by the MDTM FTP command are also affected by this

option.

use_localtime=YES
#

Activate logging of uploads/downloads.

xferlog_enable=YES
#

Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES
#

This option should be the name of a directory which is empty. Also, the

directory should not be writable by the ftp user. This directory is used

as a secure chroot() jail at times vsftpd does not require filesystem

access.

secure_chroot_dir=/var/run/vsftpd/empty
#

This string is the name of the PAM service vsftpd will use.

pam_service_name=vsftpd
userlist_file=/etc/vsftpd.user_list
#userlist_enable=YES
#userlist_deny=NO 可直接跳出登入用戶畫面
#

This option specifies the location of the RSA certificate to use for SSL

encrypted connections.

rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem

This option specifies the location of the RSA key to use for SSL

encrypted connections.

rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
root@cmk-GA-880GM-D2H:~# chmod -R 755 /home/scan1/
root@cmk-GA-880GM-D2H:~# chown -R mis:scan1 /home/scan1/
root@cmk-GA-880GM-D2H:~# sudo service vsftpd restart

注： mis用戶有讀寫權限，mis2、dsc用戶有讀權限。

方法2：
root@cmk-GA-880GM-D2H:/home/scan1# chmod -R u=x,g=rwx /home/scan1/
root@cmk-GA-880GM-D2H:/home/scan1# ls -al
注： mis用戶有讀權限，mis2、dsc用戶有寫讀權限。

root@cmk-GA-880GM-D2H:/home# sudo service vsftpd stop