Linux FTP Server Configuration Setup & What is FTP Server?

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="color: blue;"><span style="font-size: large;">What is FTP Server?</span></span><br /><br />FTP ( File Transfer Protocol ) it is Standard network protocol & used for file transferring protocol.<br />Or other miens  <br />File Transfer Protocol is a standard network protocol used to transfer files from one host to another host over a TCP-based network, such as the Internet. FTP is built on a client-server architecture and uses separate control and data connections between the client and the server.<br /><br /><span style="color: blue;"><span style="font-size: large;">Interdiction of FTP Server:</span></span><br />The File Transfer Protocol (FTP) is used as one of the most common means of copying files between servers over the Internet. Most web based download sites use the built in FTP capabilities of web browsers and therefore most server oriented operating systems usually include an FTP server application as part of the software suite. Linux is no exception. <br /><br />Step by Step :<br /><br /><br /><h2>FTP Server</h2>This section covers the File Transport Protocol (FTP) information needed for both the RHCSA and RHCE exams.<br /> <h3>FTP Server : Installation</h3>Issue the following command to install the FTP server.<br /> <blockquote><pre># yum install vsftpd</pre></blockquote>Turn on the FTP server and make sure it starts automatically on reboot.<br /> <blockquote><pre># service vsftpd start<br /># chkconfig vsftpd on</pre></blockquote>The FTP server is now installed and running. The FTP configuration files are located under the "/etc/vsftpd" directory, specifically the "/etc/vsftpd/vsftpd.conf" file. The default directory for anonymous connections is "/var/ftp". Changes to the "/etc/vsftpd/vsftpd.conf" file have to be followed by a reload or a restart of the httpd service.<br /> <blockquote><pre># service vsftpd reload<br /># # OR<br /># service vsftpd restart</pre></blockquote><h3>FTP Server : Firewall</h3>You need to punch a hole in the firewall for port 21 to make sure the FTP server can be accessed from the network. There are several ways to do this:<br /> <ul><li>The "Firewall Configuration" dialog from the menu (System > Administration > Firewall) or initiated from the command line by running the <code>system-config-firewall</code> command. On the "Trusted Services" section, scroll down the list and check the "FTP" option, then click the "Apply" button.</li><li>The text-based "Firewall Configuration" utility (<code>system-config-firewall-tui</code>). This is the text-based version of the above dialog.</li><li>Using the <code>iptables</code> service directly, as described <a href="http://www.oracle-base.com/articles/linux/linux-firewall.php">here</a>. In this case we could need the following entry.<br /> <blockquote><pre>iptables -A INPUT -p tcp --dport 21 -j ACCEPT</pre></blockquote></li></ul><h3>FTP Server : SELinux</h3>If you are using SELinux, you will need to consider the following points.<br /> The SELinux booleans associated with the <code>vsftpd</code> service are displayed using the <code>getsebool</code> command.<br /> <blockquote><pre># getsebool -a | grep ftpd<br />allow_ftpd_anon_write --> off<br />allow_ftpd_full_access --> off<br />allow_ftpd_use_cifs --> off<br />allow_ftpd_use_nfs --> off<br />ftpd_connect_db --> off<br />ftpd_use_passive_mode --> off<br />#</pre></blockquote>The <code>setsebool</code> command is used to set a specific boolean value.<br /> <blockquote><pre># setsebool ftpd_use_passive_mode on<br /># setsebool ftpd_use_passive_mode off</pre></blockquote>The <code>public_content_t</code> context should be assigned to all public content.<br /> <blockquote><pre># semanage fcontext -a -t public_content_t "/var/ftp(/.*)?"<br /># restorecon -F -R -v /var/ftp</pre></blockquote>You can check the current context setting on files and directories using the "ls -alZ" command.<br /> More information on SELinux can be found <a href="http://www.oracle-base.com/articles/linux/security-enhanced-linux.php">here</a>.<br /> <h3>FTP Server : Security</h3>By default the FTP installation allows anonymous access, which is potentially dangerous. This is fine for the RHCSA exam, but on real servers you would probably want to disable anonymous access. To do this, edit the "/etc/vsftpd/vsftpd.conf" file, setting the "anonymous_enable" entry as follows.<br /> <blockquote><pre>anonymous_enable=NO<br />local_enable=YES</pre></blockquote>The "local_enable" options indicates that local user accounts can be used for authentication.<br /> Restart or reload the FTP service for the changes to take effect.<br /> <blockquote><pre># service vsftpd reload</pre></blockquote>The RHCE exam has a requirement for configuring an anonymous-only download FTP server. This can be done by setting the following values in the "/etc/vsftpd/vsftpd.conf" file, then restarting the service.<br /> <blockquote><pre>anonymous_enable=YES<br />anon_upload_enable=NO<br />local_enable=NO</pre></blockquote>Try and ping ftp server connect for Example :<br /><br /><br />Go on client system and check banner it will appear before user login<br /><br /> <img alt="" border="0" class="padded s5_lazyload" height="85" src="http://computernetworkingnotes.com/images/rhce_certification/image/ass30_banner_xp.jpg" style="opacity: 1;" width="381" /> <br /><br /><br /><span style="font-size: large;"><u> EndCall:</u></span><br />FTP is a very useful software application that can have enormous benefit to a Web site or to collaborative computing in which files need to be shared between business partners. Although insecure, it is universally accessible, because FTP clients are a part of all operating systems and Web browsers. If data encryption security is of great importance to you, then you should probably consider SCP as a possible alternative <br /><br />For more information :<br /><br /><ul><li><a href="http://www.oracle-base.com/articles/linux/linux-http-server-configuration.php">Linux HTTP Server Configuration (RHCE)</a></li><li><a href="https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Confined_Services/chap-Managing_Confined_Services-File_Transfer_Protocol.html">RHEL6 : Managing Confined Services : File Transfer Protocol (FTP)</a></li><li><a href="https://security.appspot.com/vsftpd/vsftpd_conf.html">vsftpd.conf</a></li><li><a href="http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/index.html">RHEL6 Documentation</a></li><li><a href="http://linux.die.net/man/">Linux man pages</a></li><li><a href="http://www.oracle-base.com/articles/linux/articles-linux.php#rhcsa_and_rhce">RHCSA and RHCE</a></li><li><a href="http://www.oracle-base.com/articles/linux/apache-tomcat-installation-on-linux.php">Apache Tomcat Installation on Linux</a></li><li><a href="http://www.oracle-base.com/articles/misc/apache-reverse-proxy-configuration.php">Apache : Reverse Proxy Configuration</a></li></ul><br /><br /><br /></div>

Linux FTP Server Configuration Setup & What is FTP Server?

What is FTP Server? FTP ( File Transfer Protocol ) it is Standard network protocol & used for file transferring protocol. Or other miens...

Read more »