Linux全攻略--FTP服务器配置与管理

#?Example?config?file?/etc/vsftpd/vsftpd.conf##?The?default?compiled?in?settings?are?fairly?paranoid.?This?sample?file#?loosens?things?up?a?bit,?to?make?the?ftp?daemon?more?usable.#?Please?see?vsftpd.conf.5?for?all?compiled?in?defaults.##?READ?THIS:?This?example?file?is?NOT?an?exhaustive?list?of?vsftpd?options.#?Please?read?the?vsftpd.conf.5?manual?page?to?get?a?full?idea?of?vsftpd's#?capabilities.##?Allow?anonymous?FTP??(Beware?-?allowed?by?default?if?you?comment?this?out).anonymous_enable=YES??//是否允许anonymous登录FTP服务器,默认是允许的.##?Uncomment?this?to?allow?local?users?to?log?in.local_enable=YES?//是否允许本地用户登录FTP服务器,默认是允许##?Uncomment?this?to?enable?any?form?of?FTP?write?command.write_enable=YES??//是否允许用户具有在FTP服务器文件中执行写的权限,默认是允许##?Default?umask?for?local?users?is?077.?You?may?wish?to?change?this?to?022,#?if?your?users?expect?that?(022?is?used?by?most?other?ftpd's)local_umask=022?//设置本地用户的文件生成掩码为022,默认是077##?Uncomment?this?to?allow?the?anonymous?FTP?user?to?upload?files.?This?only#?has?an?effect?if?the?above?global?write?enable?is?activated.?Also,?you?will#?obviously?need?to?create?a?directory?writable?by?the?FTP?user.#anon_upload_enable=YES##?Uncomment?this?if?you?want?the?anonymous?FTP?user?to?be?able?to?create#?new?directories.#anon_mkdir_write_enable=YES??//是否允许匿名账户在FTP服务器中创建目录##?Activate?directory?messages?-?messages?given?to?remote?users?when?they#?go?into?a?certain?directory.dirmessage_enable=YES?//激活目录信息,当远程用户更改目录时,将出现提示信息##?Activate?logging?of?uploads/downloads.xferlog_enable=YES??//启用上传和下载日志功能##?Make?sure?PORT?transfer?connections?originate?from?port?20?(ftp-data).connect_from_port_20=YES???//启用FTP数据端口的连接请求##?If?you?want,?you?can?arrange?for?uploaded?anonymous?files?to?be?owned?by#?a?different?user.?Note!?Using?"root"?for?uploaded?files?is?not#?recommended!#chown_uploads=YES#chown_username=whoever##?You?may?override?where?the?log?file?goes?if?you?like.?The?default?is?shown#?below.#xferlog_file=/var/log/vsftpd.log??//设置日志文件的文件名和存储路径,这是默认的##?If?you?want,?you?can?have?your?log?file?in?standard?ftpd?xferlog?formatxferlog_std_format=YES//是否使用标准的ftpd?xferlog日志文件格式##?You?may?change?the?default?value?for?timing?out?an?idle?session.#idle_session_timeout=600??//设置空闲的用户会话中断时间,默认是10分钟##?You?may?change?the?default?value?for?timing?out?a?data?connection.#data_connection_timeout=120//设置数据连接超时时间,默认是120秒.##?It?is?recommended?that?you?define?on?your?system?a?unique?user?which?the#?ftp?server?can?use?as?a?totally?isolated?and?unprivileged?user.#nopriv_user=ftpsecure##?Enable?this?and?the?server?will?recognise?asynchronous?ABOR?requests.?Not#?recommended?for?security?(the?code?is?non-trivial).?Not?enabling?it,#?however,?may?confuse?older?FTP?clients.#async_abor_enable=YES##?By?default?the?server?will?pretend?to?allow?ASCII?mode?but?in?fact?ignore#?the?request.?Turn?on?the?below?options?to?have?the?server?actually?do?ASCII#?mangling?on?files?when?in?ASCII?mode.#?Beware?that?turning?on?ascii_download_enable?enables?malicious?remote?parties#?to?consume?your?I/O?resources,?by?issuing?the?command?"SIZE?/big/file"?in#?ASCII?mode.#?These?ASCII?options?are?split?into?upload?and?download?because?you?may?wish#?to?enable?ASCII?uploads?(to?prevent?uploaded?scripts?etc.?from?breaking),#?without?the?DoS?risk?of?SIZE?and?ASCII?downloads.?ASCII?mangling?should?be#?on?the?client?anyway..#ascii_upload_enable=YES#ascii_download_enable=YES?//是否允许使用ASCII格式来上传和下载文件##?You?may?fully?customise?the?login?banner?string:#ftpd_banner=Welcome?to?blah?FTP?service.//在FTP服务器中设置欢迎登录的信息.##?You?may?specify?a?file?of?disallowed?anonymous?e-mail?addresses.?Apparently#?useful?for?combatting?certain?DoS?attacks.#deny_email_enable=YES#?(default?follows)#banned_email_file=/etc/vsftpd.banned_emails##?You?may?specify?an?explicit?list?of?local?users?to?chroot()?to?their?home#?directory.?If?chroot_local_user?is?YES,?then?this?list?becomes?a?list?of#?users?to?NOT?chroot().#chroot_list_enable=YES?//如果希望用户登录后不能切换到自己目录以外的其它目录,需要设置该项,如果设置chroot_list_enable=YES,那么只允许/etc?/vsftpd.chroot_list中列出的用户具有该功能.如果希望所有的本地用户都执行者chroot,可以增加一?行:chroot_local_user=YES#?(default?follows)#chroot_list_file=/etc/vsftpd.chroot_list##?You?may?activate?the?"-R"?option?to?the?builtin?ls.?This?is?disabled?by#?default?to?avoid?remote?users?being?able?to?cause?excessive?I/O?on?large#?sites.?However,?some?broken?FTP?clients?such?as?"ncftp"?and?"mirror"?assume#?the?presence?of?the?"-R"?option,?so?there?is?a?strong?case?for?enabling?it.#ls_recurse_enable=YESpam_service_name=vsftpd??//设置PAM认证服务的配置文件名称,该文件存放在/etc/pam.d/目录下.userlist_enable=YES?//用户列表中的用户是否允许登录FTP服务器,默认是不允许#enable?for?standalone?modelisten=YES??//使vsftpd?处于独立启动模式tcp_wrappers=YES??//使用tcp_wrqppers作为主机访问控制方式

#?Users?that?are?not?allowed?to?login?via?ftproot?//默认情况下,root和它以下的用户是不允许登录FTP服务器的.可以将不允许登录的用户添加到这里来.但切记每个用户都要单独占用一行.bindaemonadmlpsyncshutdownhaltmailnewsuucpoperatorgamesnobody