linux下设置ftp及增加SSL服务.doc

《linux下设置ftp及增加SSL服务.doc》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、Linux下vsftpd及SSL的支持一、VSftpd1、设置vsftpd，默认linux下安装自带vsftpd，在命令行下运行setup找到networksetup选中vsftpd属性；2、修改配置/etc/vsftpd/vsftpd.conf#Exampleconfigfile/etc/vsftpd/vsftpd.conf##Thedefaultcompiledinsettingsarefairlyparanoid.Thissamplefile#loosensthingsupabit,tomakethe

2、ftpdaemonmoreusable.#Pleaseseevsftpd.conf.5forallcompiledindefaults.##READTHIS:ThisexamplefileisNOTanexhaustivelistofvsftpdoptions.#Pleasereadthevsftpd.conf.5manualpagetogetafullideaofvsftpd's#capabilities.##AllowanonymousFTP?(Beware-allowedbydefaultifyouc

3、ommentthisout).anonymous_enable=NO##Uncommentthistoallowlocaluserstologin.local_enable=YES##UncommentthistoenableanyformofFTPwritecommand.write_enable=YES##Defaultumaskforlocalusersis077.Youmaywishtochangethisto022,#ifyourusersexpectthat(022isusedbymostoth

4、erftpd's)local_umask=022##UncommentthistoallowtheanonymousFTPusertouploadfiles.Thisonly#hasaneffectiftheaboveglobalwriteenableisactivated.Also,youwill#obviouslyneedtocreateadirectorywritablebytheFTPuser.anon_upload_enable=NO##Uncommentthisifyouwanttheanony

5、mousFTPusertobeabletocreate#newdirectories.anon_mkdir_write_enable=NO##Activatedirectorymessages-messagesgiventoremoteuserswhenthey#gointoacertaindirectory.dirmessage_enable=YES##Thetargetlogfilecanbevsftpd_log_fileorxferlog_file.#Thisdependsonsettingxferl

6、og_std_formatparameterxferlog_enable=YES##MakesurePORTtransferconnectionsoriginatefromport20(ftp-data).connect_from_port_20=YES##Ifyouwant,youcanarrangeforuploadedanonymousfilestobeownedby#adifferentuser.Note!Using"root"foruploadedfilesisnot#recommended!#c

7、hown_uploads=YES#chown_username=whoever##Thenameoflogfilewhenxferlog_enable=YESandxferlog_std_format=YES#WARNING-changingthisfilenameaffects/etc/logrotate.d/vsftpd.log#xferlog_file=/var/log/xferlog##Switchesbetweenloggingintovsftpd_log_fileandxferlog_filef

8、iles.#NOwritestovsftpd_log_file,YEStoxferlog_filexferlog_std_format=YES##Youmaychangethedefaultvaluefortimingoutanidlesession.#idle_session_timeout=600##Youmaychangethedefaultvaluefortimingoutadataconnection.