File Transfer Protocol (FTP) servers can be useful for providing files to customers and for exchanging files with partners and business associates. However, FTP can become the bane of existence for the admins who must keep these services secure and operational. Poorly secured FTP services can often result in a successful attack on a server. That’s where VSFTP comes in.<\/p>\n
VSFTP is a secure, stable, and fast FTP server. It can greatly decrease the chances of an attacker gaining access to a server via FTP exploits. Want evidence? The Red Hat, OpenBSD, and SuSE FTP sites all have one thing in common: They all run on VSFTP. Even SANS recommends VSFTP as the preferred FTP daemon because of its tight security.<\/p>\n
# vi \/etc\/vsftpd\/vsftpd.conf\n\nlisten=YES\nanonymous_enable=NO\nlocal_enable=YES\nwrite_enable=YES\n\ndirmessage_enable=YES\n\nxferlog_enable=YES\n\nconnect_from_port_20=YES\n\nchroot_local_user=YES\n\n#listen_ipv6=YES\n\nrsa_cert_file=\/etc\/ssl\/certs\/vsftpd.pem # if cert install\n\npam_service_name=vsftpd #Or ftp\n\nlisten_port=50021\npasv_min_port=60010\npasv_max_port=60020\npasv_address= {Server IP}\npasv_addr_resolve=YES\npasv_enable=YES\nlog_ftp_protocol=YES\n\nforce_dot_files=YES\nhide_ids=YES\nmax_per_ip=10\nmax_clients=100\nallow_writeable_chroot=YES<\/pre>\nport services change<\/h3>\n# sudo vi \/etc\/services\n\nftp 21\/tcp => ftp 50021\/tcp<\/pre>\nfirewall open<\/h3>\n
Inbound range
\nfpt tcp : 50021
\npassv tcp : 60010:60020<\/p>\n
restart vsftpd<\/h3>\nsystemctl restart vsftpd\n<\/pre>\n","protected":false},"excerpt":{"rendered":"Remark : FTP : File Transfer Protocol (FTP) servers can be useful for providing files to customers and for exchanging files with partners and business associates. However, FTP can become the bane of existence for the admins who must keep these services secure and operational. Poorly secured FTP services can often result in a successful …
FTP vs VSFTP and 21 Port change<\/span> \ub354\ubcf4\uae30<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"parent":10,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-292","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/292","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=292"}],"version-history":[{"count":17,"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/292\/revisions"}],"predecessor-version":[{"id":500,"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/292\/revisions\/500"}],"up":[{"embeddable":true,"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/10"}],"wp:attachment":[{"href":"https:\/\/centos.ihavenomoney.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=292"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}