\u73b0\u5728\uff0c\u8ba9\u6211\u4eec\u4fee\u6539\u8fd9\u4e9b\u5173\u952e\u8bbe\u7f6e\uff1a<\/p>\n

\r\n# \u7981\u7528\u533f\u540d\u767b\u5f55\r\nanonymous_enable=NO\r\n\r\n# \u542f\u7528\u672c\u5730\u7528\u6237\u767b\u5f55\r\nlocal_enable=YES\r\n\r\n# \u5141\u8bb8\u6587\u4ef6\u4e0a\u4f20\r\nwrite_enable=YES\r\n\r\n# \u5c06\u7528\u6237\u9650\u5236\u5728\u5176\u4e3b\u76ee\u5f55\r\nchroot_local_user=YES\r\nallow_writeable_chroot=YES\r\n\r\n# \u8bbe\u7f6e\u88ab\u52a8\u7aef\u53e3\u8303\u56f4\uff08\u5bf9\u9632\u706b\u5899\u5f88\u91cd\u8981\uff09\r\npasv_min_port=40000\r\npasv_max_port=50000\r\n\r\n# \u9650\u5236\u7528\u6237\u8bbf\u95ee\u5176\u4e3b\u76ee\u5f55\r\nuser_sub_token=$USER\r\nlocal_root=\/home\/$USER\/ftp\r\n\r\n# \u542f\u7528\u65e5\u5fd7\u8bb0\u5f55\r\nxferlog_enable=YES\r\nxferlog_file=\/var\/log\/vsftpd.log\r\nxferlog_std_format=YES\r\n\r\n# \u81ea\u5b9a\u4e49\u6b22\u8fce\u6d88\u606f\r\nftpd_banner=\u6b22\u8fce\u6765\u5230\u6211\u4eec\u7684\u9999\u6e2fFTP\u670d\u52a1\u5668\uff01\r\n    <\/code><\/pre>\n
\u8fd9\u4e9b\u8bbe\u7f6e\u63d0\u4f9b\u4e86\u5b89\u5168\u6027\u548c\u529f\u80fd\u6027\u7684\u5e73\u8861\u3002\u88ab\u52a8\u7aef\u53e3\u8303\u56f4\u5bf9\u4e8e\u9632\u706b\u5899\u540e\u9762\u7684\u5ba2\u6237\u7aef\u7279\u522b\u91cd\u8981\u3002<\/p>\n
\n
<\/h2>\n
\u521b\u5efa\u548c\u7ba1\u7406FTP\u7528\u6237<\/strong><\/h2>\n
\u73b0\u5728\uff0c\u8ba9\u6211\u4eec\u8bbe\u7f6e\u4e00\u4e2a\u4e13\u7528\u7684FTP\u7528\u6237\uff1a<\/p>\n
\r\n# \u521b\u5efa\u65b0\u7528\u6237\r\nsudo adduser ftpuser\r\n\r\n# \u521b\u5efaFTP\u76ee\u5f55\u7ed3\u6784\r\nsudo mkdir -p \/home\/ftpuser\/ftp\/files\r\nsudo chown nobody:nogroup \/home\/ftpuser\/ftp\r\nsudo chmod a-w \/home\/ftpuser\/ftp\r\n\r\n# \u8bbe\u7f6efiles\u76ee\u5f55\u7684\u6240\u6709\u6743\u548c\u6743\u9650\r\nsudo chown ftpuser:ftpuser \/home\/ftpuser\/ftp\/files\r\nsudo chmod 0770 \/home\/ftpuser\/ftp\/files\r\n\r\n# \u53ef\u9009\uff1a\u9650\u5236\u7528\u6237\u4ec5\u4f7f\u7528FTP\r\nsudo usermod -s \/usr\/sbin\/nologin ftpuser\r\n    <\/code><\/pre>\n
\u8fd9\u4e2a\u8bbe\u7f6e\u4e3aFTP\u7528\u6237\u521b\u5efa\u4e86\u4e00\u4e2a\u5b89\u5168\u7684\u73af\u5883\uff0c\u5c06\u4ed6\u4eec\u9650\u5236\u5728\u6307\u5b9a\u7684\u76ee\u5f55\u4e2d\u3002<\/p>\n
\n
<\/h2>\n
\u4e3aFTP\u6d41\u91cf\u914d\u7f6e\u9632\u706b\u5899<\/strong><\/h2>\n
\u8981\u5141\u8bb8FTP\u6d41\u91cf\u901a\u8fc7\u6211\u4eec\u7684\u9632\u706b\u5899\uff0c\u6211\u4eec\u9700\u8981\u5f00\u653e\u5fc5\u8981\u7684\u7aef\u53e3\uff1a<\/p>\n
\r\n# \u5141\u8bb8FTP\u63a7\u5236\u901a\u9053\r\nsudo ufw allow 21\/tcp\r\n\r\n# \u5141\u8bb8FTP\u6570\u636e\u901a\u9053\r\nsudo ufw allow 20\/tcp\r\n\r\n# \u5141\u8bb8\u88ab\u52a8FTP\u7aef\u53e3\r\nsudo ufw allow 40000:50000\/tcp\r\n\r\n# \u91cd\u65b0\u52a0\u8f7d\u9632\u706b\u5899\u4ee5\u5e94\u7528\u66f4\u6539\r\nsudo ufw reload\r\n\r\n# \u9a8c\u8bc1\u9632\u706b\u5899\u89c4\u5219\r\nsudo ufw status\r\n    <\/code><\/pre>\n
\u8fd9\u4e9b\u89c4\u5219\u5141\u8bb8\u4e3b\u52a8\u548c\u88ab\u52a8FTP\u8fde\u63a5\uff0c\u540c\u65f6\u4fdd\u6301\u9632\u706b\u5899\u4fdd\u62a4\u3002<\/p>\n
\n
<\/h2>\n
\u5b9e\u65bdSSL\/TLS\u52a0\u5bc6<\/strong><\/h2>\n
\u5b89\u5168\u6027\u81f3\u5173\u91cd\u8981\uff0c\u5c24\u5176\u662f\u5728\u50cf\u9999\u6e2f\u8fd9\u6837\u7684\u9ad8\u6d41\u91cf\u4f4d\u7f6e\u6258\u7ba1\u65f6\u3002\u8ba9\u6211\u4eec\u52a0\u5bc6\u6211\u4eec\u7684FTP\u8fde\u63a5\uff1a<\/p>\n
\r\n# \u751f\u6210SSL\u8bc1\u4e66\r\nsudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/vsftpd.pem -out \/etc\/ssl\/private\/vsftpd.pem\r\n\r\n# \u914d\u7f6evsftpd\u4f7f\u7528SSL\/TLS\r\nsudo nano \/etc\/vsftpd.conf\r\n\r\n# \u5728\u914d\u7f6e\u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u884c\uff1a\r\nssl_enable=YES\r\nrsa_cert_file=\/etc\/ssl\/private\/vsftpd.pem\r\nrsa_private_key_file=\/etc\/ssl\/private\/vsftpd.pem\r\nallow_anon_ssl=NO\r\nforce_local_data_ssl=YES\r\nforce_local_logins_ssl=YES\r\nssl_tlsv1=YES\r\nssl_sslv2=NO\r\nssl_sslv3=NO\r\nrequire_ssl_reuse=NO\r\nssl_ciphers=HIGH\r\n    <\/code><\/pre>\n
\u6b64\u8bbe\u7f6e\u786e\u4fdd\u6240\u6709FTP\u8fde\u63a5\u90fd\u7ecf\u8fc7\u52a0\u5bc6\uff0c\u4fdd\u62a4\u60a8\u7684\u6570\u636e\u5728\u4f20\u8f93\u8fc7\u7a0b\u4e2d\u7684\u5b89\u5168\u3002<\/p>\n
\n
<\/h2>\n
\u9ad8\u6d41\u91cf\u573a\u666f\u7684\u6027\u80fd\u8c03\u4f18<\/strong><\/h2>\n
\u9999\u6e2f\u7684\u5feb\u901f\u4e92\u8054\u7f51\u5141\u8bb8\u9ad8\u6027\u80fd\u8bbe\u7f6e\u3002\u8ba9\u6211\u4eec\u4e3a\u5927\u91cf\u4f7f\u7528\u4f18\u5316vsftpd\uff1a<\/p>\n
\r\n# \u7f16\u8f91vsftpd.conf\r\nsudo nano \/etc\/vsftpd.conf\r\n\r\n# \u6dfb\u52a0\u6216\u4fee\u6539\u8fd9\u4e9b\u884c\uff1a\r\nmax_clients=200\r\nmax_per_ip=10\r\nlocal_max_rate=10485760  # 10MB\/s\r\nidle_session_timeout=600\r\ndata_connection_timeout=300\r\n    <\/code><\/pre>\n
\u8fd9\u4e9b\u8bbe\u7f6e\u5141\u8bb8\u66f4\u591a\u5e76\u53d1\u8fde\u63a5\uff0c\u5e76\u8bbe\u7f6e\u5408\u7406\u7684\u9650\u5236\u4ee5\u9632\u6b62\u6ee5\u7528\u3002<\/p>\n
\n
<\/h2>\n
\u76d1\u63a7\u548c\u65e5\u5fd7\u8bb0\u5f55<\/strong><\/h2>\n
\u4e3a\u4e86\u76d1\u63a7\u60a8\u7684FTP\u670d\u52a1\u5668\u7684\u6027\u80fd\u548c\u5b89\u5168\u6027\uff0c\u8bbe\u7f6e\u9002\u5f53\u7684\u65e5\u5fd7\u8bb0\u5f55\uff1a<\/p>\n
\r\n# \u786e\u4fdd\u8fd9\u4e9b\u884c\u5728vsftpd.conf\u4e2d\r\nxferlog_enable=YES\r\nxferlog_file=\/var\/log\/vsftpd.log\r\nxferlog_std_format=YES\r\nlog_ftp_protocol=YES\r\n\r\n# \u5b9e\u65f6\u76d1\u63a7\u65e5\u5fd7\r\nsudo tail -f \/var\/log\/vsftpd.log\r\n\r\n# \u4f7f\u7528fail2ban\u6765\u9632\u6b62\u66b4\u529b\u653b\u51fb\r\nsudo apt install fail2ban -y\r\nsudo cp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local\r\nsudo nano \/etc\/fail2ban\/jail.local\r\n\r\n# \u5728jail.local\u4e2d\u6dfb\u52a0\u6b64\u914d\u7f6e\uff1a\r\n[vsftpd]\r\nenabled = true\r\nport = ftp,ftp-data,ftps,ftps-data\r\nlogpath = \/var\/log\/vsftpd.log\r\nmaxretry = 3\r\nbantime = 3600\r\n    <\/code><\/pre>\n
\u8fd9\u4e2a\u8bbe\u7f6e\u63d0\u4f9b\u4e86\u5168\u9762\u7684\u65e5\u5fd7\u8bb0\u5f55\u548c\u5bf9\u6f5c\u5728\u653b\u51fb\u7684\u4fdd\u62a4\u3002<\/p>\n
\n
<\/h2>\n
\u6d4b\u8bd5\u60a8\u7684FTP\u670d\u52a1\u5668<\/strong><\/h2>\n
\u73b0\u5728\u4e00\u5207\u90fd\u8bbe\u7f6e\u597d\u4e86\uff0c\u8ba9\u6211\u4eec\u6d4b\u8bd5\u6211\u4eec\u7684FTP\u670d\u52a1\u5668\uff1a<\/p>\n
\r\n# \u91cd\u542fvsftpd\u4ee5\u5e94\u7528\u6240\u6709\u66f4\u6539\r\nsudo systemctl restart vsftpd\r\n\r\n# \u6d4b\u8bd5\u672c\u5730\u8fde\u63a5\r\nftp localhost\r\n\r\n# \u6d4b\u8bd5SSL\/TLS\u8fde\u63a5\uff08\u5982\u679c\u672a\u5b89\u88c5lftp\uff0c\u8bf7\u5b89\u88c5\uff09\r\nsudo apt install lftp -y\r\nlftp -u ftpuser,password -p 21 localhost\r\nlftp> set ssl:verify-certificate no\r\nlftp> ls\r\n    <\/code><\/pre>\n
\u5982\u679c\u60a8\u53ef\u4ee5\u8fde\u63a5\u5e76\u5217\u51fa\u76ee\u5f55\uff0c\u606d\u559c\u60a8\uff01\u60a8\u7684FTP\u670d\u52a1\u5668\u5df2\u7ecf\u53ef\u4ee5\u8fd0\u884c\u4e86\u3002<\/p>\n
\n
<\/h2>\n
\u603b\u7ed3\uff1a\u60a8\u7684\u9999\u6e2fFTP\u5821\u5792<\/strong><\/h2>\n
\u60a8\u73b0\u5728\u5df2\u7ecf\u5728\u9999\u6e2f\u7684Ubuntu 18.04\u4e0a\u8bbe\u7f6e\u4e86\u4e00\u4e2a\u5f3a\u5927\u3001\u5b89\u5168\u548c\u9ad8\u6027\u80fd\u7684FTP\u670d\u52a1\u5668\u3002\u8fd9\u4e2a\u8bbe\u7f6e\u5229\u7528\u4e86Ubuntu\u7684\u7a33\u5b9a\u6027\u3001vsftpd\u7684\u5b89\u5168\u6027\u4ee5\u53ca\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u7684\u6218\u7565\u4f18\u52bf\u3002\u8bf7\u8bb0\u4f4f\u4fdd\u6301\u7cfb\u7edf\u66f4\u65b0\uff0c\u5b9a\u671f\u67e5\u770b\u65e5\u5fd7\uff0c\u5e76\u6839\u636e\u60a8\u7684\u9700\u6c42\u8c03\u6574\u914d\u7f6e\u3002\u6709\u4e86\u8fd9\u4e2a\u5f3a\u5927\u7684FTP\u670d\u52a1\u5668\uff0c\u60a8\u5c31\u80fd\u591f\u5728\u5145\u6ee1\u6d3b\u529b\u7684\u4e9a\u6d32\u5e02\u573a\u53ca\u66f4\u5e7f\u6cdb\u7684\u5730\u533a\u9ad8\u6548\u3001\u5b89\u5168\u5730\u5904\u7406\u6587\u4ef6\u4f20\u8f93\u3002[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
[vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]\u6b22\u8fce\u5404\u4f4d\u6280\u672f\u7231\u597d\u8005\uff01\u4eca\u5929\uff0c\u6211\u4eec\u5c06\u6df1\u5165\u63a2\u8ba8FTP\u670d\u52a1\u5668\u7684\u4e16\u754c\uff0c\u7279\u522b\u5173\u6ce8\u5728\u9999\u6e2f\u7684Ubuntu 18.04\u4e0a\u8bbe\u7f6e\u4e00\u4e2a\u5f3a\u5927\u800c\u5b89\u5168\u7684FTP\u670d\u52a1\u5668\u3002\u672c\u6307\u5357\u4e13\u4e3a\u90a3\u4e9b\u6b23\u8d4f\u670d\u52a1\u5668\u914d\u7f6e\u7ec6\u8282\u5e76\u5e0c\u671b\u5229\u7528\u9999\u6e2f\u6218\u7565\u4f4d\u7f6e\u4f18\u52bf\u8fdb\u884c\u670d\u52a1\u5668\u79df\u7528\u7684\u4eba\u800c\u8bbe\u8ba1\u3002\u5728\u672c\u6559\u7a0b\u7ed3\u675f\u65f6\uff0c\u60a8\u5c06\u62e5\u6709\u4e00\u4e2a\u529f\u80fd\u9f50\u5168\u3001\u5b89\u5168\u4e14\u4f18\u5316\u7684FTP\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u6ee1\u8db3\u60a8\u7684\u6587\u4ef6\u4f20\u8f93\u9700\u6c42\u3002 \u9ec4\u91d1\u4e09\u89d2\uff1aUbuntu 18.04\u3001FTP\u548c\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528 \u5728\u6211\u4eec\u5f00\u59cb\u6df1\u5165\u4ee3\u7801\u4e4b\u524d\uff0c\u8ba9\u6211\u4eec\u4e86\u89e3\u4e3a\u4ec0\u4e48\u8fd9\u79cd\u7ec4\u5408\u662f\u6280\u672f\u5929\u5802\u4e2d\u7684\u5b8c\u7f8e\u642d\u914d\uff1a Ubuntu 18.04 LTS\uff1a\u4ee5\u5176\u7a33\u5b9a\u6027\u3001\u5b89\u5168\u6027\u548c\u957f\u671f\u652f\u6301\u800c\u95fb\u540d\uff0cUbuntu 18.04\u4e3a\u60a8\u7684FTP\u670d\u52a1\u5668\u63d0\u4f9b\u4e86\u575a\u5b9e\u7684\u57fa\u7840\u3002 FTP\uff08\u6587\u4ef6\u4f20\u8f93\u534f\u8bae\uff09\uff1a\u5c3d\u7ba1\u5e74\u4ee3\u4e45\u8fdc\uff0c\u4f46FTP\u4ecd\u7136\u662f\u4e00\u79cd\u7528\u4e8e\u6587\u4ef6\u4f20\u8f93\u7684\u591a\u529f\u80fd\u4e14\u5e7f\u6cdb\u652f\u6301\u7684\u534f\u8bae\uff0c\u5c24\u5176\u662f\u5728\u589e\u52a0\u73b0\u4ee3\u5b89\u5168\u63aa\u65bd\u540e\u3002 \u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\uff1a\u51ed\u501f\u5176\u6218\u7565\u4f4d\u7f6e\u3001\u5148\u8fdb\u57fa\u7840\u8bbe\u65bd\u548c\u6709\u5229\u7684\u4e92\u8054\u7f51\u653f\u7b56\uff0c\u9999\u6e2f\u4e3a\u4e9a\u6d32\u548c\u5168\u7403\u5e02\u573a\u63d0\u4f9b\u4e86\u51fa\u8272\u7684\u8fde\u63a5\u6027\u3002 \u51c6\u5907\u60a8\u7684Ubuntu 18.04 \u5728\u90e8\u7f72FTP\u670d\u52a1\u5668\u4e4b\u524d\uff0c\u8ba9\u6211\u4eec\u786e\u4fdd\u6211\u4eec\u7684Ubuntu\u7cfb\u7edf\u5df2\u4e3a\u884c\u52a8\u505a\u597d\u51c6\u5907\u3002\u6253\u5f00\u60a8\u7684\u7ec8\u7aef\uff0c\u8ba9\u6211\u4eec\u5f00\u59cb\uff1a # \u66f4\u65b0\u8f6f\u4ef6\u5305\u5217\u8868\u5e76\u5347\u7ea7\u5df2\u5b89\u88c5\u7684\u8f6f\u4ef6\u5305 sudo apt update && sudo apt upgrade -y # \u68c0\u67e5\u9632\u706b\u5899\u72b6\u6001 sudo ufw status # \u5982\u679cUFW\u5904\u4e8e\u975e\u6d3b\u52a8\u72b6\u6001\uff0c\u8bf7\u542f\u7528\u5b83 sudo ufw enable # \u5b89\u88c5\u5fc5\u8981\u5de5\u5177 sudo apt install net-tools curl wget -y \u8fd9\u4e9b\u547d\u4ee4\u786e\u4fdd\u60a8\u7684\u7cfb\u7edf\u662f\u6700\u65b0\u7684\u5e76\u914d\u5907\u4e86\u5fc5\u8981\u7684\u5de5\u5177\u3002\u9632\u706b\u5899\uff08UFW\uff09\u5bf9\u5b89\u5168\u6027\u81f3\u5173\u91cd\u8981\uff0c\u56e0\u6b64\u8bf7\u786e\u4fdd\u5b83\u5904\u4e8e\u6d3b\u52a8\u72b6\u6001\u3002 \u5b89\u88c5vsftpd\uff1a\u60a8\u7684FTP\u670d\u52a1\u5668\u9009\u62e9 \u6211\u4eec\u5c06\u4f7f\u7528vsftpd\uff08Very Secure FTP Daemon\uff09\u56e0\u5176\u5f3a\u5927\u7684\u5b89\u5168\u529f\u80fd\u548c\u7075\u6d3b\u6027\u3002\u8ba9\u6211\u4eec\u5b89\u88c5\u5b83\uff1a # \u5b89\u88c5vsftpd sudo apt install […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":15408,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[62],"tags":[3384,3385,2305,1882,849],"class_list":["post-15421","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-sc","tag-ubuntu-18-04-sc","tag-vsftpd-sc","tag-ftp-server-sc","tag-hong-kong-hosting-sc","tag-server-security-sc"],"acf":[],"yoast_head":"\n