\u73fe\u5728\uff0c\u8b93\u6211\u5011\u4fee\u6539\u9019\u4e9b\u95dc\u9375\u8a2d\u7f6e\uff1a<\/p>\n

\r\n# \u7981\u7528\u533f\u540d\u767b\u5165\r\nanonymous_enable=NO\r\n\r\n# \u555f\u7528\u672c\u5730\u7528\u6236\u767b\u5165\r\nlocal_enable=YES\r\n\r\n# \u5141\u8a31\u6a94\u6848\u4e0a\u50b3\r\nwrite_enable=YES\r\n\r\n# \u5c07\u7528\u6236\u9650\u5236\u5728\u5176\u4e3b\u76ee\u9304\r\nchroot_local_user=YES\r\nallow_writeable_chroot=YES\r\n\r\n# \u8a2d\u7f6e\u88ab\u52d5\u57e0\u7bc4\u570d\uff08\u5c0d\u9632\u706b\u7246\u5f88\u91cd\u8981\uff09\r\npasv_min_port=40000\r\npasv_max_port=50000\r\n\r\n# \u9650\u5236\u7528\u6236\u8a2a\u554f\u5176\u4e3b\u76ee\u9304\r\nuser_sub_token=$USER\r\nlocal_root=\/home\/$USER\/ftp\r\n\r\n# \u555f\u7528\u65e5\u8a8c\u8a18\u9304\r\nxferlog_enable=YES\r\nxferlog_file=\/var\/log\/vsftpd.log\r\nxferlog_std_format=YES\r\n\r\n# \u81ea\u8a02\u6b61\u8fce\u8a0a\u606f\r\nftpd_banner=\u6b61\u8fce\u4f86\u5230\u6211\u5011\u7684\u9999\u6e2fFTP\u4f3a\u670d\u5668\uff01\r\n    <\/code><\/pre>\n
\u9019\u4e9b\u8a2d\u7f6e\u63d0\u4f9b\u4e86\u5b89\u5168\u6027\u548c\u529f\u80fd\u6027\u7684\u5e73\u8861\u3002\u88ab\u52d5\u57e0\u7bc4\u570d\u5c0d\u65bc\u9632\u706b\u7246\u5f8c\u9762\u7684\u5ba2\u6236\u7aef\u7279\u5225\u91cd\u8981\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u5275\u5efa\u548c\u7ba1\u7406FTP\u7528\u6236<\/strong><\/h2>\n
\u73fe\u5728\uff0c\u8b93\u6211\u5011\u8a2d\u7f6e\u4e00\u500b\u5c08\u7528\u7684FTP\u7528\u6236\uff1a<\/p>\n
\r\n# \u5275\u5efa\u65b0\u7528\u6236\r\nsudo adduser ftpuser\r\n\r\n# \u5275\u5efaFTP\u76ee\u9304\u7d50\u69cb\r\nsudo mkdir -p \/home\/ftpuser\/ftp\/files\r\nsudo chown nobody:nogroup \/home\/ftpuser\/ftp\r\nsudo chmod a-w \/home\/ftpuser\/ftp\r\n\r\n# \u8a2d\u7f6efiles\u76ee\u9304\u7684\u6240\u6709\u6b0a\u548c\u6b0a\u9650\r\nsudo chown ftpuser:ftpuser \/home\/ftpuser\/ftp\/files\r\nsudo chmod 0770 \/home\/ftpuser\/ftp\/files\r\n\r\n# \u53ef\u9078\uff1a\u9650\u5236\u7528\u6236\u50c5\u4f7f\u7528FTP\r\nsudo usermod -s \/usr\/sbin\/nologin ftpuser\r\n    <\/code><\/pre>\n
\u9019\u500b\u8a2d\u7f6e\u70baFTP\u7528\u6236\u5275\u5efa\u4e86\u4e00\u500b\u5b89\u5168\u7684\u74b0\u5883\uff0c\u5c07\u4ed6\u5011\u9650\u5236\u5728\u6307\u5b9a\u7684\u76ee\u9304\u4e2d\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u70baFTP\u6d41\u91cf\u914d\u7f6e\u9632\u706b\u7246<\/strong><\/h2>\n
\u8981\u5141\u8a31FTP\u6d41\u91cf\u901a\u904e\u6211\u5011\u7684\u9632\u706b\u7246\uff0c\u6211\u5011\u9700\u8981\u958b\u653e\u5fc5\u8981\u7684\u57e0\uff1a<\/p>\n
\r\n# \u5141\u8a31FTP\u63a7\u5236\u901a\u9053\r\nsudo ufw allow 21\/tcp\r\n\r\n# \u5141\u8a31FTP\u6578\u64da\u901a\u9053\r\nsudo ufw allow 20\/tcp\r\n\r\n# \u5141\u8a31\u88ab\u52d5FTP\u57e0\r\nsudo ufw allow 40000:50000\/tcp\r\n\r\n# \u91cd\u65b0\u8f09\u5165\u9632\u706b\u7246\u4ee5\u61c9\u7528\u66f4\u6539\r\nsudo ufw reload\r\n\r\n# \u9a57\u8b49\u9632\u706b\u7246\u898f\u5247\r\nsudo ufw status\r\n    <\/code><\/pre>\n
\u9019\u4e9b\u898f\u5247\u5141\u8a31\u4e3b\u52d5\u548c\u88ab\u52d5FTP\u9023\u63a5\uff0c\u540c\u6642\u4fdd\u6301\u9632\u706b\u7246\u4fdd\u8b77\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u5be6\u65bdSSL\/TLS\u52a0\u5bc6<\/strong><\/h2>\n
\u5b89\u5168\u6027\u81f3\u95dc\u91cd\u8981\uff0c\u5c24\u5176\u662f\u5728\u50cf\u9999\u6e2f\u9019\u6a23\u7684\u9ad8\u6d41\u91cf\u4f4d\u7f6e\u8a17\u7ba1\u6642\u3002\u8b93\u6211\u5011\u52a0\u5bc6\u6211\u5011\u7684FTP\u9023\u63a5\uff1a<\/p>\n
\r\n# \u751f\u6210SSL\u6191\u8b49\r\nsudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/vsftpd.pem -out \/etc\/ssl\/private\/vsftpd.pem\r\n\r\n# \u914d\u7f6evsftpd\u4f7f\u7528SSL\/TLS\r\nsudo nano \/etc\/vsftpd.conf\r\n\r\n# \u5728\u914d\u7f6e\u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u884c\uff1a\r\nssl_enable=YES\r\nrsa_cert_file=\/etc\/ssl\/private\/vsftpd.pem\r\nrsa_private_key_file=\/etc\/ssl\/private\/vsftpd.pem\r\nallow_anon_ssl=NO\r\nforce_local_data_ssl=YES\r\nforce_local_logins_ssl=YES\r\nssl_tlsv1=YES\r\nssl_sslv2=NO\r\nssl_sslv3=NO\r\nrequire_ssl_reuse=NO\r\nssl_ciphers=HIGH\r\n    <\/code><\/pre>\n
\u6b64\u8a2d\u7f6e\u78ba\u4fdd\u6240\u6709FTP\u9023\u63a5\u90fd\u7d93\u904e\u52a0\u5bc6\uff0c\u4fdd\u8b77\u60a8\u7684\u6578\u64da\u5728\u50b3\u8f38\u904e\u7a0b\u4e2d\u7684\u5b89\u5168\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u9ad8\u6d41\u91cf\u5834\u666f\u7684\u6548\u80fd\u8abf\u512a<\/strong><\/h2>\n
\u9999\u6e2f\u7684\u5feb\u901f\u7db2\u969b\u7db2\u8def\u5141\u8a31\u9ad8\u6548\u80fd\u8a2d\u7f6e\u3002\u8b93\u6211\u5011\u70ba\u5927\u91cf\u4f7f\u7528\u6700\u4f73\u5316vsftpd\uff1a<\/p>\n
\r\n# \u7de8\u8f2fvsftpd.conf\r\nsudo nano \/etc\/vsftpd.conf\r\n\r\n# \u6dfb\u52a0\u6216\u4fee\u6539\u9019\u4e9b\u884c\uff1a\r\nmax_clients=200\r\nmax_per_ip=10\r\nlocal_max_rate=10485760  # 10MB\/s\r\nidle_session_timeout=600\r\ndata_connection_timeout=300\r\n    <\/code><\/pre>\n
\u9019\u4e9b\u8a2d\u7f6e\u5141\u8a31\u66f4\u591a\u4e26\u767c\u9023\u63a5\uff0c\u4e26\u8a2d\u7f6e\u5408\u7406\u7684\u9650\u5236\u4ee5\u9632\u6b62\u6feb\u7528\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u76e3\u63a7\u548c\u65e5\u8a8c\u8a18\u9304<\/strong><\/h2>\n
\u70ba\u4e86\u76e3\u63a7\u60a8\u7684FTP\u4f3a\u670d\u5668\u7684\u6548\u80fd\u548c\u5b89\u5168\u6027\uff0c\u8a2d\u7f6e\u9069\u7576\u7684\u65e5\u8a8c\u8a18\u9304\uff1a<\/p>\n
\r\n# \u78ba\u4fdd\u9019\u4e9b\u884c\u5728vsftpd.conf\u4e2d\r\nxferlog_enable=YES\r\nxferlog_file=\/var\/log\/vsftpd.log\r\nxferlog_std_format=YES\r\nlog_ftp_protocol=YES\r\n\r\n# \u5373\u6642\u76e3\u63a7\u65e5\u8a8c\r\nsudo tail -f \/var\/log\/vsftpd.log\r\n\r\n# \u4f7f\u7528fail2ban\u4f86\u9632\u6b62\u66b4\u529b\u653b\u64ca\r\nsudo apt install fail2ban -y\r\nsudo cp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local\r\nsudo nano \/etc\/fail2ban\/jail.local\r\n\r\n# \u5728jail.local\u4e2d\u6dfb\u52a0\u6b64\u914d\u7f6e\uff1a\r\n[vsftpd]\r\nenabled = true\r\nport = ftp,ftp-data,ftps,ftps-data\r\nlogpath = \/var\/log\/vsftpd.log\r\nmaxretry = 3\r\nbantime = 3600\r\n    <\/code><\/pre>\n
\u9019\u500b\u8a2d\u7f6e\u63d0\u4f9b\u4e86\u5168\u9762\u7684\u65e5\u8a8c\u8a18\u9304\u548c\u5c0d\u6f5b\u5728\u653b\u64ca\u7684\u4fdd\u8b77\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u6e2c\u8a66\u60a8\u7684FTP\u4f3a\u670d\u5668<\/strong><\/h2>\n
\u73fe\u5728\u4e00\u5207\u90fd\u8a2d\u7f6e\u597d\u4e86\uff0c\u8b93\u6211\u5011\u6e2c\u8a66\u6211\u5011\u7684FTP\u4f3a\u670d\u5668\uff1a<\/p>\n
\r\n# \u91cd\u555fvsftpd\u4ee5\u61c9\u7528\u6240\u6709\u66f4\u6539\r\nsudo systemctl restart vsftpd\r\n\r\n# \u6e2c\u8a66\u672c\u5730\u9023\u63a5\r\nftp localhost\r\n\r\n# \u6e2c\u8a66SSL\/TLS\u9023\u63a5\uff08\u5982\u679c\u672a\u5b89\u88ddlftp\uff0c\u8acb\u5b89\u88dd\uff09\r\nsudo apt install lftp -y\r\nlftp -u ftpuser,password -p 21 localhost\r\nlftp> set ssl:verify-certificate no\r\nlftp> ls\r\n    <\/code><\/pre>\n
\u5982\u679c\u60a8\u53ef\u4ee5\u9023\u63a5\u4e26\u5217\u51fa\u76ee\u9304\uff0c\u606d\u559c\u60a8\uff01\u60a8\u7684FTP\u4f3a\u670d\u5668\u5df2\u7d93\u53ef\u4ee5\u904b\u884c\u4e86\u3002<\/p>\n
\n
<\/h2>\n
<\/h2>\n
\u7e3d\u7d50\uff1a\u60a8\u7684\u9999\u6e2fFTP\u5821\u58d8<\/strong><\/h2>\n
\u60a8\u73fe\u5728\u5df2\u7d93\u5728\u9999\u6e2f\u7684Ubuntu 18.04\u4e0a\u8a2d\u7f6e\u4e86\u4e00\u500b\u5f37\u5927\u3001\u5b89\u5168\u548c\u9ad8\u6548\u80fd\u7684FTP\u4f3a\u670d\u5668\u3002\u9019\u500b\u8a2d\u7f6e\u5229\u7528\u4e86Ubuntu\u7684\u7a69\u5b9a\u6027\u3001vsftpd\u7684\u5b89\u5168\u6027\u4ee5\u53ca\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u7684\u6230\u7565\u512a\u52e2\u3002\u8acb\u8a18\u4f4f\u4fdd\u6301\u7cfb\u7d71\u66f4\u65b0\uff0c\u5b9a\u671f\u67e5\u770b\u65e5\u8a8c\uff0c\u4e26\u6839\u64da\u60a8\u7684\u9700\u6c42\u8abf\u6574\u914d\u7f6e\u3002\u6709\u4e86\u9019\u500b\u5f37\u5927\u7684FTP\u4f3a\u670d\u5668\uff0c\u60a8\u5c31\u80fd\u5920\u5728\u5145\u6eff\u6d3b\u529b\u7684\u4e9e\u6d32\u5e02\u5834\u53ca\u66f4\u5ee3\u6cdb\u7684\u5730\u5340\u9ad8\u6548\u3001\u5b89\u5168\u5730\u8655\u7406\u6a94\u6848\u50b3\u8f38\u3002[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
[vc_row el_class=”blog-detail-section”][vc_ […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":15407,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[61],"tags":[3382,3383,2303,852,247],"class_list":["post-15422","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-tc","tag-ubuntu-18-04-tc","tag-vsftpd-tc","tag-ftp-server-tc","tag-server-security-tc","tag-hong-kong-server-rental-tc"],"acf":[],"yoast_head":"\n