{"id":3988,"date":"2021-11-25T22:58:16","date_gmt":"2021-11-26T06:58:16","guid":{"rendered":"https:\/\/www.xh86.me\/?p=3988"},"modified":"2021-11-25T23:08:02","modified_gmt":"2021-11-26T07:08:02","slug":"ubuntu-20-04-x-debian-10-x%e8%af%91%e5%ae%89%e8%a3%85%e9%85%8d%e7%bd%aepure-ftpd%e6%9c%8d%e5%8a%a1%e5%99%a8","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=3988","title":{"rendered":"Ubuntu 20.04.x\/Debian 10.x\u8bd1\u5b89\u88c5\u914d\u7f6ePure-FTPd\u670d\u52a1\u5668"},"content":{"rendered":"
\n

<\/div><\/p>\n

\u8bf4\u660e\uff1a<\/strong><\/span><\/p>\n

Pure-FTPd\u662f\u4e00\u6b3e\u5f00\u6e90\u7684FTP\u670d\u52a1\u5668\u8f6f\u4ef6\uff0c\u914d\u7f6e\u7b80\u5355\uff0c\u5b89\u5168\u9ad8\u6548\uff0c\u4e0b\u9762\u6211\u4eec\u5728CentOS 8.x\/Rocky Linux 8.x\u7cfb\u7edf\u4e0b\u90e8\u7f72Pure-FTPd<\/p>\n

\u4e00\u3001\u914d\u7f6e\u9632\u706b\u5899\uff0c\u5f00\u542fPure-FTPd\u9700\u8981\u7684\u7aef\u53e3<\/span><\/p>\n

1.1\u5b89\u88c5iptables\u9632\u706b\u5899<\/p>\n

Ubuntu Server\u9ed8\u8ba4\u6ca1\u6709\u5f00\u542f\u4efb\u4f55\u9632\u706b\u5899\u7684\uff0c\u4f46\u662f\u9ed8\u8ba4\u5b89\u88c5\u4e86ufw\u9632\u706b\u5899\uff0c\u6211\u4eec\u8fd9\u91cc\u63a8\u8350\u4f7f\u7528iptables\u9632\u706b\u5899\u3002<\/p>\n

ufw status #\u67e5\u770b\u7cfb\u7edf\u81ea\u5e26\u7684ufw\u9632\u706b\u5899\u72b6\u6001<\/p>\n

Status: inactive #\u8868\u793a\u5173\u95ed<\/p>\n

ufw disable #\u5173\u95edufw\u9632\u706b\u5899\uff0c\u53c2\u6570enable\u662f\u5f00\u542f\uff0c\u6211\u4eec\u8fd9\u91cc\u5173\u95ed<\/p>\n

apt-get remove ufw #\u5378\u8f7dufw<\/p>\n

apt-get purge ufw #\u6e05\u9664ufw\u4f9d\u8d56\u5305<\/p>\n

whereis iptables #\u67e5\u770b\u7cfb\u7edf\u662f\u5426\u5b89\u88c5\u9632\u706b\u5899<\/p>\n

apt-get install iptables #\u8fd0\u884c\u6b64\u547d\u4ee4\u5b89\u88c5\u9632\u706b\u5899<\/p>\n

mkdir \/etc\/sysconfig #\u521b\u5efa\u9632\u706b\u5899\u914d\u7f6e\u6587\u4ef6\u5b58\u653e\u76ee\u5f55<\/p>\n

touch \/etc\/sysconfig\/iptables #\u521b\u5efa\u9632\u706b\u5899\u914d\u7f6e\u6587\u4ef6<\/p>\n

nano \/etc\/sysconfig\/iptables #\u7f16\u8f91\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219<\/p>\n

# sample configuration for iptables service<\/p>\n

# you can edit this manually or use system-config-firewall<\/p>\n

# please do not ask us to add additional ports\/services to this default configuration<\/p>\n

*filter<\/p>\n

:INPUT ACCEPT [0:0]<\/p>\n

:FORWARD ACCEPT [0:0]<\/p>\n

:OUTPUT ACCEPT [0:0]<\/p>\n

-A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT<\/p>\n

-A INPUT -p icmp -j ACCEPT<\/p>\n

-A INPUT -i lo -j ACCEPT<\/p>\n

-A INPUT -p tcp -m state –state NEW -m tcp –dport 22 -j ACCEPT<\/p>\n

-A INPUT -p tcp -m state –state NEW -m tcp –dport\u00a021<\/span>\u00a0-j ACCEPT<\/p>\n

-A INPUT -p tcp -m state –state NEW -m tcp –dport\u00a030000:50000<\/span>\u00a0-j ACCEPT<\/p>\n

-A INPUT -j REJECT –reject-with icmp-host-prohibited<\/p>\n

-A FORWARD -j REJECT –reject-with icmp-host-prohibited<\/p>\n

COMMIT<\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables #\u4f7f\u9632\u706b\u5899\u89c4\u5219\u751f\u6548<\/p>\n

\u8bf4\u660e\uff1a21\u7aef\u53e3\u662fftp\u670d\u52a1\u7aef\u53e3\uff1b30000\u523050000\u662fftp\u88ab\u52a8\u6a21\u5f0f\u9700\u8981\u7684\u7aef\u53e3\uff0c\u53ef\u81ea\u5b9a\u4e49\u4e00\u6bb5\u5927\u4e8e1024\u7684tcp\u7aef\u53e3\u3002<\/span><\/p>\n

\u7279\u522b\u6ce8\u610f\uff1a<\/strong><\/span><\/p>\n

1\u3001\u4fee\u6539\u5b8c\u9632\u706b\u5899\u89c4\u5219\u6587\u4ef6\/etc\/sysconfig\/iptables\u540e\uff0c\u9700\u8981\u518d\u6b21\u6267\u884c<\/p>\n

\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables<\/span>\u00a0\u547d\u4ee4\uff0c\u9632\u706b\u5899\u89c4\u5219\u624d\u80fd\u751f\u6548\u3002<\/p>\n

2\u3001\u7cfb\u7edf\u91cd\u542f\u540e\uff0c\u9632\u706b\u5899\u9ed8\u8ba4\u4e0d\u4f1a\u5f00\u673a\u542f\u52a8\uff0c\u9700\u8981\u518d\u6b21\u6267\u884c\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables\u547d\u4ee4\uff0c\u9632\u706b\u5899\u89c4\u5219\u624d\u80fd\u751f\u6548\u3002<\/p>\n

3\u3001\u5982\u679c\u8981\u4e34\u65f6\u5173\u95ed\u9632\u706b\u5899\uff0c\u9700\u8981\u6e05\u7a7a\/etc\/sysconfig\/iptables\u914d\u7f6e\u6587\u4ef6\uff0c\u518d\u6b21\u6267\u884c\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables\u547d\u4ee4\u3002<\/p>\n

4\u3001\u5982\u679c\u8981\u518d\u6b21\u5f00\u542f\u9632\u706b\u5899\uff0c\u9700\u8981\u6062\u590d\/etc\/sysconfig\/iptables\u914d\u7f6e\u6587\u4ef6\uff0c\u518d\u6b21\u6267\u884c\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables\u547d\u4ee4\u3002<\/p>\n

1.2\u6dfb\u52a0\u9632\u706b\u5899\u7ba1\u7406\u811a\u672c<\/p>\n

nano \/etc\/init.d\/iptables\u00a0#\u7f16\u8f91\u6dfb\u52a0\u811a\u672c<\/span><\/p>\n

#\u811a\u672c\u4e2d\u7684IPTABLES_CONFIG=\/etc\/sysconfig\/iptables\u662f\u9632\u706b\u5899\u914d\u7f6e\u89c4\u5219\u6587\u4ef6\u7684\u8def\u5f84\u3002<\/p>\n

#!\/bin\/sh -e<\/p>\n

### BEGIN INIT INFO<\/p>\n

# Provides: iptables<\/p>\n

# Required-Start: mountvirtfs ifupdown $local_fs<\/p>\n

# Default-Start: S<\/p>\n

# Default-Stop: 0 6<\/p>\n

### END INIT INFO<\/p>\n

# July 9, 2007<\/p>\n

# James B. Crocker <ubuntu@james.crocker.name><\/p>\n

# Creative Commons Attribution – Share Alike 3.0 License (BY,SA)<\/p>\n

# Script to load\/unload\/save iptables firewall settings.<\/p>\n

PATH=”\/usr\/local\/sbin:\/usr\/local\/bin:\/sbin:\/bin:\/usr\/sbin:\/usr\/bin”<\/p>\n

IPTABLES=\/sbin\/iptables<\/p>\n

IPTABLES_SAVE=\/sbin\/iptables-save<\/p>\n

IPTABLES_RESTORE=\/sbin\/iptables-restore<\/p>\n

IPTABLES_CONFIG=\/etc\/sysconfig\/iptables<\/p>\n

[ -x $IPTABLES ] || exit 0<\/p>\n

. \/lib\/lsb\/init-functions<\/p>\n

case “$1” in<\/p>\n

start)<\/p>\n

log_action_begin_msg “Starting firewall”<\/p>\n

type usplash_write >\/dev\/null 2>\/dev\/null && usplash_write “TIMEOUT 120” || true<\/p>\n

if $IPTABLES_RESTORE < $IPTABLES_CONFIG ; then<\/p>\n

log_action_end_msg $?<\/p>\n

else<\/p>\n

log_action_end_msg $?<\/p>\n

fi<\/p>\n

type usplash_write >\/dev\/null 2>\/dev\/null && usplash_write “TIMEOUT 15” || true<\/p>\n

;;<\/p>\n

stop)<\/p>\n

log_action_begin_msg “Saving current firewall configuration”<\/p>\n

if $IPTABLES_SAVE > $IPTABLES_CONFIG ; then<\/p>\n

log_action_end_msg $?<\/p>\n

else<\/p>\n

log_action_end_msg $?<\/p>\n

fi<\/p>\n

log_action_begin_msg “Flushing ALL firewall rules from chains!”<\/p>\n

if $IPTABLES -F ; then<\/p>\n

log_action_end_msg $?<\/p>\n

else<\/p>\n

log_action_end_msg $?<\/p>\n

fi<\/p>\n

log_action_begin_msg “Deleting ALL firewall chains [Warning: ACCEPTING ALL PORT SERVICES!]”<\/p>\n

if $IPTABLES -X ; then<\/p>\n

$IPTABLES -P INPUT ACCEPT<\/p>\n

$IPTABLES -P FORWARD ACCEPT<\/p>\n

$IPTABLES -P OUTPUT ACCEPT<\/p>\n

log_action_end_msg $?<\/p>\n

else<\/p>\n

log_action_end_msg $?<\/p>\n

fi<\/p>\n

;;<\/p>\n

save)<\/p>\n

log_action_begin_msg “Saving current firewall configuration”<\/p>\n

if $IPTABLES_SAVE > $IPTABLES_CONFIG ; then<\/p>\n

log_action_end_msg $?<\/p>\n

else<\/p>\n

log_action_end_msg $?<\/p>\n

fi<\/p>\n

;;<\/p>\n

force-reload|restart)<\/p>\n

log_action_begin_msg “Reloading firewall configuration [Warning: POTENTIAL NETWORK INSECURITY DURING RELOAD]”<\/p>\n

$IPTABLES -F<\/p>\n

$IPTABLES -X<\/p>\n

if $IPTABLES_RESTORE < $IPTABLES_CONFIG ; then<\/p>\n

log_action_end_msg $?<\/p>\n

else<\/p>\n

log_action_end_msg $?<\/p>\n

fi<\/p>\n

;;<\/p>\n

*)<\/p>\n

echo “Usage: \/etc\/init.d\/iptables {start|stop|save|restart|force-reload}”<\/p>\n

exit 1<\/p>\n

;;<\/p>\n

esac<\/p>\n

exit 0<\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

chmod +x \/etc\/init.d\/iptables #\u6dfb\u52a0\u6267\u884c\u6743\u9650<\/p>\n

update-rc.d iptables defaults 99 #\u6dfb\u52a0\u670d\u52a1<\/p>\n

systemctl start iptables.service\u00a0#\u542f\u52a8<\/span><\/p>\n

service iptables stop #\u505c\u6b62<\/p>\n

#\u73b0\u5728\u5c31\u53ef\u4ee5\u4f7f\u7528\u4e0a\u9762\u7684\u547d\u4ee4\u7ba1\u7406\u9632\u706b\u5899\u4e86\uff0c\u542f\u52a8\u3001\u505c\u6b62<\/span><\/p>\n

#\u5982\u679c\u4fee\u6539\u4e86\u9632\u706b\u5899\u914d\u7f6e\u89c4\u5219\uff0c\u8fd8\u662f\u9700\u8981\u6267\u884c\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables\u547d\u4ee4\u4f7f\u5176\u751f\u6548\uff0c\u7136\u540e\u518d\u4f7f\u7528\u9632\u706b\u5899\u7ba1\u7406\u811a\u672c\u8fdb\u884c\u7ba1\u7406<\/span><\/p>\n

1.3\u8bbe\u7f6e\u9632\u706b\u5899\u5f00\u673a\u542f\u52a8<\/p>\n

1.3.1\u4f7f\u7528\u7cfb\u7edf\u542f\u52a8\u811a\u672c\u8fdb\u884c\u8bbe\u7f6e<\/p>\n

cp \/lib\/systemd\/system\/rc-local.service\u00a0 \u00a0\/lib\/systemd\/system\/rc-local.service-bak #\u5907\u4efd<\/p>\n

ln -s \/lib\/systemd\/system\/rc-local.service\u00a0 \u00a0\/etc\/systemd\/system\/ #\u521b\u5efa\u8f6f\u8fde\u63a5\u6587\u4ef6<\/p>\n

nano \/lib\/systemd\/system\/rc-local.service\u00a0 \u00a0#\u6dfb\u52a0[Install]<\/span>\u6bb5\u5230\u6700\u540e<\/p>\n

# SPDX-License-Identifier: LGPL-2.1+<\/p>\n

#<\/p>\n

# This file is part of systemd.<\/p>\n

#<\/p>\n

# systemd is free software; you can redistribute it and\/or modify it<\/p>\n

# under the terms of the GNU Lesser General Public License as published by<\/p>\n

# the Free Software Foundation; either version 2.1 of the License, or<\/p>\n

# (at your option) any later version.<\/p>\n

# This unit gets pulled automatically into multi-user.target by<\/p>\n

# systemd-rc-local-generator if \/etc\/rc.local is executable.<\/p>\n

[Unit]<\/p>\n

Description=\/etc\/rc.local Compatibility<\/p>\n

Documentation=man:systemd-rc-local-generator(8)<\/p>\n

ConditionFileIsExecutable=\/etc\/rc.local<\/p>\n

After=network.target<\/p>\n

[Service]<\/p>\n

Type=forking<\/p>\n

ExecStart=\/etc\/rc.local start<\/p>\n

TimeoutSec=0<\/p>\n

RemainAfterExit=yes<\/p>\n

GuessMainPID=no<\/p>\n

[Install]<\/span><\/p>\n

WantedBy=multi-user.target<\/span><\/p>\n

Alias=rc-local.service<\/span><\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

nano \/etc\/rc.local #\u521b\u5efa\u6587\u4ef6\uff0c\u6dfb\u52a0\u9632\u706b\u5899\u542f\u52a8\u547d\u4ee4<\/p>\n

#!\/bin\/bash<\/p>\n

\/sbin\/iptables-restore < \/etc\/sysconfig\/iptables<\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

chmod +x \/etc\/rc.local #\u6dfb\u52a0\u6267\u884c\u6743\u9650<\/p>\n

#\u91cd\u65b0\u542f\u52a8\u7cfb\u7edf\u8fdb\u884c\u6d4b\u8bd5\uff0c\u73b0\u5728\u9632\u706b\u5899\u5df2\u7ecf\u5f00\u673a\u81ea\u542f\u52a8\u4e86<\/span><\/p>\n

1.3.2\u4f7f\u7528sysv-rc-conf\u670d\u52a1\u8bbe\u7f6e\u5f00\u673a\u542f\u52a8<\/p>\n

Ubuntu Server 20.x\u7cfb\u7edf\u4e2d\u9ed8\u8ba4\u5df2\u7ecf\u6ca1\u6709sysv-rc-conf\u5305\u4e86\uff0c\u6211\u4eec\u65e0\u6cd5\u76f4\u63a5\u4f7f\u7528apt-get\u5b89\u88c5<\/p>\n

\u73b0\u5728\u6211\u4eec\u4fee\u6539apt-get\u6e90<\/p>\n

cp \/etc\/apt\/sources.list \/etc\/apt\/sources.list-bak #\u5907\u4efd<\/p>\n

nano \/etc\/apt\/sources.list #\u7f16\u8f91\u6dfb\u52a0\u4e0b\u9762\u4e00\u884c\u4ee3\u7801<\/p>\n

deb http:\/\/archive.ubuntu.com\/ubuntu\/ trusty main universe restricted multiverse<\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

apt-get update #\u66f4\u65b0\u8f6f\u4ef6\u6e90\u7d22\u5f15<\/p>\n

apt-get install sysv-rc-conf #\u5b89\u88c5<\/p>\n

#\u6211\u4eec\u4f7f\u7528Ubuntu Server 14.x \u7684apt-get\u6e90\u6765\u5b89\u88c5sysv-rc-conf\uff0ctrusty\u8868\u793aUbuntu Server 14.x\u7248\u672c<\/p>\n

cp \/usr\/sbin\/sysv-rc-conf \/usr\/sbin\/chkconfig #\u62f7\u8d1d<\/p>\n

sysv-rc-conf iptables on #\u8bbe\u7f6e\u5f00\u673a\u542f\u52a8<\/p>\n

chkconfig iptables on<\/p>\n

sysv-rc-conf #\u67e5\u770b\u542f\u52a8\u670d\u52a1<\/p>\n

#\u91cd\u65b0\u542f\u52a8\u7cfb\u7edf\u8fdb\u884c\u6d4b\u8bd5\uff0c\u73b0\u5728\u9632\u706b\u5899\u5df2\u7ecf\u5f00\u673a\u81ea\u542f\u52a8\u4e86<\/p>\n

Ubuntu\u7cfb\u7edf\u4e2d\u9ed8\u8ba4\u662f\u6ca1\u6709\u5f00\u542fSELINUX\u7684\uff0c\u65e0\u9700\u5173\u95ed\u3002<\/p>\n

\n

\u4e09\u3001\u5b89\u88c5pure-ftpd<\/span><\/p>\n

1\u3001\u5b89\u88c5\u7f16\u8bd1\u5de5\u5177\u5305<\/p>\n

apt-get install build-essential gcc g++ make openssl libssl-dev bzip2 wget tar<\/p>\n

2\u3001\u4e0b\u8f7dpure-ftpd<\/p>\n

cd \/usr\/local\/src\/<\/p>\n

wget https:\/\/download.pureftpd.org\/pub\/pure-ftpd\/releases\/pure-ftpd-1.0.49.tar.gz<\/p>\n

3\u3001\u5b89\u88c5pure-ftpd<\/p>\n

mkdir -p \/usr\/local\/pureftpd\u00a0#\u521b\u5efa\u5b89\u88c5\u76ee\u5f55<\/span><\/p>\n

cd \/usr\/local\/src\/<\/p>\n

tar zxvf pure-ftpd-1.0.49.tar.gz<\/p>\n

cd pure-ftpd-1.0.49<\/p>\n

.\/configure –prefix=\/usr\/local\/pureftpd –with-language=simplified-chinese –with-everything CFLAGS=-O2 –with-puredb –with-quotas –with-cookie –with-virtualhosts –with-diraliases –with-sysquotas –with-ratios –with-altlog –with-paranoidmsg –with-shadow –with-welcomemsg –with-throttling –with-uploadscript –with-language=english –with-ftpwho –with-tls<\/p>\n

make<\/p>\n

make install<\/p>\n

nano \/etc\/profile\u00a0#\u628apure-ftpd\u670d\u52a1\u52a0\u5165\u7cfb\u7edf\u73af\u5883\u53d8\u91cf\uff1a\u5728\u6700\u540e\u6dfb\u52a0\u4e0b\u9762\u8fd9\u4e00\u884c<\/span><\/p>\n

export PATH=$PATH:\/usr\/local\/pureftpd\/bin<\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

source \/etc\/profile\u00a0#\u4f7f\u914d\u7f6e\u7acb\u523b\u751f\u6548<\/span><\/p>\n

nano \/usr\/lib\/systemd\/system\/pure-ftpd.service\u00a0#\u8bbe\u7f6epureftpd\u5f00\u673a\u542f\u52a8<\/span><\/p>\n

[Unit]<\/p>\n

Description=Pure-FTPd FTP server<\/p>\n

After=syslog.target network.target<\/p>\n

[Service]<\/p>\n

Type=forking<\/p>\n

ExecStart=\/usr\/local\/pureftpd\/sbin\/pure-ftpd \/usr\/local\/pureftpd\/etc\/pure-ftpd.conf<\/p>\n

ExecReload=\/bin\/kill -s HUP $MAINPID<\/p>\n

ExecStop=\/bin\/kill -s QUIT $MAINPID<\/p>\n

[Install]<\/p>\n

WantedBy=multi-user.target<\/p>\n

ctrl+o\u00a0#\u4fdd\u5b58<\/span><\/p>\n

ctrl+x\u00a0#\u9000\u51fa<\/span><\/p>\n

systemctl enable pure-ftpd\u00a0#\u6dfb\u52a0\u5f00\u673a\u542f\u52a8<\/span><\/p>\n

systemctl start pure-ftpd.service\u00a0#\u542f\u52a8<\/span><\/p>\n

systemctl stop pure-ftpd.service\u00a0#\u505c\u6b62<\/span><\/p>\n

systemctl restart pure-ftpd.service\u00a0#\u91cd\u542f<\/span><\/p>\n

4\u3001\u914d\u7f6epure-ftpd<\/p>\n

4.1\u65b0\u5efa\u7cfb\u7edf\u7528\u6237\u548c\u7ec4www\uff0c\u7528\u6237\u767b\u5f55\u7ec8\u7aef\u8bbe\u4e3a\/sbin\/nologin\uff08\u5373\u4e0d\u80fd\u767b\u5f55\u7cfb\u7edf\uff09<\/p>\n

groupadd www<\/p>\n

useradd -s \/sbin\/nologin -g www www<\/p>\n

#\u6b64\u7cfb\u7edf\u7528\u6237\u4f5c\u4e3aftp\u865a\u62df\u7528\u6237\u7684\u5bbf\u4e3b\u7528\u6237<\/span><\/p>\n

4.2\u521b\u5efaFTP\u670d\u52a1\u5668\u865a\u62df\u7528\u6237\u8bbf\u95ee\u76ee\u5f55<\/p>\n

mkdir -p \/data\/web #ftp\u865a\u62df\u7528\u6237\u4e3b\u76ee\u5f55<\/p>\n

mkdir -p \/data\/web\/ftpuser01 #ftp\u865a\u62df\u7528\u6237ftpuser01\u7684\u76ee\u5f55<\/p>\n

mkdir -p \/data\/web\/ftpuser02 #ftp\u865a\u62df\u7528\u6237ftpuser02\u7684\u76ee\u5f55<\/p>\n

chown www.www \/data\/web -R #\u8bbe\u7f6eftp\u865a\u62df\u7528\u6237\u76ee\u5f55\u6743\u9650\u4e3a\u5bbf\u4e3b\u7528\u6237www\u6240\u6709<\/p>\n

4.3\u521b\u5efa\u865a\u62df\u7528\u6237<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw useradd ftpuser01 -u www -d \/data\/web\/ftpuser01<\/p>\n

\u63d0\u793a\u8f93\u5165ftp\u865a\u62df\u7528\u6237\u5bc6\u7801\uff1a<\/p>\n

Password:123456<\/p>\n

Enter it again:123456<\/p>\n

\u540c\u6837\u53ef\u4ee5\u6dfb\u52a0\u7b2c\u4e8c\u4e2a\u7528\u6237<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw useradd ftpuser02 -u www -d \/data\/web\/ftpuser02<\/p>\n

-u\u9009\u9879\u5c06ftp\u865a\u62df\u7528\u6237\u548c\u5bbf\u4e3b\u7528\u6237www\u5173\u8054\uff0c\u865a\u62df\u7528\u6237\u767b\u5f55\u540e\uff0c\u4f1a\u4ee5\u5bbf\u4e3b\u7528\u6237\u6743\u9650\u8fdb\u884c\u4e0a\u4f20\u4e0b\u8f7d\u64cd\u4f5c<\/p>\n

-d\u9009\u9879\u540e\u9762\u662fftp\u865a\u62df\u7528\u6237\u7684\u76ee\u5f55\uff0c\u6bcf\u4e2aftp\u865a\u62df\u7528\u6237\u53ea\u80fd\u8bbf\u95ee\u81ea\u5df1\u7684\u76ee\u5f55<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw mkdb #\u751f\u6210\u865a\u62df\u7528\u6237\u6570\u636e\u6587\u4ef6<\/p>\n

#\u865a\u62df\u7528\u6237\u6570\u636e\u5b58\u653e\u6587\u4ef6<\/p>\n

\/usr\/local\/pureftpd\/etc\/pureftpd.passwd #\u865a\u62df\u7528\u6237\u6587\u4ef6<\/p>\n

\/usr\/local\/pureftpd\/etc\/pureftpd.pdb #\u865a\u62df\u7528\u6237\u6570\u636e\u6587\u4ef6<\/p>\n

4.4\u4fee\u6539pure-ftpd\u914d\u7f6e\u6587\u4ef6<\/p>\n

mkdir -p \/usr\/local\/pureftpd\/var\/run\/ #\u521b\u5efa\u8fdb\u7a0b\u6587\u4ef6\u5b58\u653e\u76ee\u5f55<\/p>\n

mkdir -p \/usr\/local\/pureftpd\/var\/log\/ #\u521b\u5efa\u65e5\u5fd7\u6587\u4ef6\u5b58\u653e\u76ee\u5f55<\/p>\n

nano \/usr\/local\/pureftpd\/etc\/welcome #\u6dfb\u52a0Pure-FTPd\u767b\u5f55\u6b22\u8fce\u4fe1\u606f\u6587\u4ef6\uff0c\u5185\u5bb9\u53ef\u4ee5\u81ea\u5b9a\u4e49<\/p>\n

Welcome to Pure-FTPd<\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

cp \/usr\/local\/pureftpd\/etc\/pure-ftpd.conf \/usr\/local\/pureftpd\/etc\/pure-ftpd.conf-bak #\u5907\u4efd\u914d\u7f6e\u6587\u4ef6<\/p>\n

nano \/usr\/local\/pureftpd\/etc\/pure-ftpd.conf\u00a0#\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6<\/span><\/p>\n

Bind 0.0.0.0,21 #\u8bbe\u7f6eftp\u7aef\u53e3\uff0c\u9ed8\u8ba4\u4e3a21\uff0c0.0.0.0\u8868\u793a\u672c\u673a\u6240\u6709ip\u5730\u5740<\/p>\n

PassivePortRange 30000 50000 #\u8bbe\u7f6ePureFTP\u88ab\u52a8\u7aef\u53e3<\/p>\n

AnonymousCantUpload yes #\u7981\u6b62\u533f\u540d\u7528\u6237\u4e0a\u4f20\u6587\u4ef6( no\u8868\u793a\u5141\u8bb8\u4e0a\u4f20)<\/p>\n

NoAnonymous yes #\u7981\u6b62\u533f\u540d\u8fde\u63a5\uff0c\u4ec5\u5141\u8bb8\u8ba4\u8bc1\u7528\u6237\u8fde\u63a5<\/p>\n

UnixAuthentication no #\u7981\u6b62\u7cfb\u7edf\u7528\u6237\u8ba4\u8bc1<\/p>\n

Daemonize yes #\u5141\u8bb8\u540e\u53f0\u8fd0\u884c<\/p>\n

PureDB \/usr\/local\/pureftpd\/etc\/pureftpd.pdb #\u865a\u62df\u7528\u6237\u6570\u636e\u6587\u4ef6<\/p>\n

PIDFile \/usr\/local\/pureftpd\/var\/run\/pure-ftpd.pid #\u8fdb\u7a0b\u6587\u4ef6<\/p>\n

AltLog clf:\/usr\/local\/pureftpd\/var\/log\/pureftpd.log #\u65e5\u5fd7\u6587\u4ef6<\/p>\n

FortunesFile \/usr\/local\/pureftpd\/etc\/welcome #Pure-FTPd\u767b\u5f55\u6b22\u8fce\u4fe1\u606f<\/p>\n

#TLS 2\u00a0#\u652f\u6301\u52a0\u5bc6\u4f20\u8f93<\/span><\/p>\n

#CertFile \/usr\/local\/pureftpd\/ssl\/pure-ftpd.pem\u00a0#\u52a0\u5bc6\u8bc1\u4e66\u8def\u5f84<\/span><\/p>\n

ctrl+o #\u4fdd\u5b58<\/p>\n

ctrl+x #\u9000\u51fa<\/p>\n

systemctl restart pure-ftpd.service #\u91cd\u542f<\/p>\n

5\u3001\u4f7f\u7528ftp\u5ba2\u6237\u7aef\u8fdb\u884c\u8fde\u63a5<\/p>\n

\u5728Windows\u4e0b\u4f7f\u7528ftp\u5ba2\u6237\u7aef\u8f6f\u4ef6\uff08FileZilla\u3001FlashFXP\uff09\u8fde\u63a5ftp\u670d\u52a1\u5668<\/p>\n

<\/div><\/p>\n

<\/div><\/p>\n

\u6269\u5c55\u9605\u8bfb\uff1a<\/strong><\/span><\/p>\n

1\u3001pure-ftpd\u865a\u62df\u7528\u6237\u76f8\u5173\u64cd\u4f5c<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw passwd ftpuser01 #\u4fee\u6539\u5bc6\u7801<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw useradd ftpuser01 -u www -d \/home\/web\/ftpuser01 #\u6dfb\u52a0\u7528\u6237<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw userdel ftpuser01 #\u5220\u9664\u7528\u6237<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw usermod ftpuser01 -d \/home\/web\/ftpuser01 #\u4fee\u6539\u7528\u6237\u76ee\u5f55<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw show ftpuser01 #\u67e5\u770b\u7528\u6237\u8be6\u7ec6\u4fe1\u606f<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw list #\u67e5\u770b\u6240\u6709\u7528\u6237<\/p>\n

\/usr\/local\/pureftpd\/bin\/pure-pw mkdb #\u5bf9ftp\u865a\u62df\u7528\u6237\u8fdb\u884c\u4fee\u6539\u7b49\u64cd\u4f5c\u540e\u8981\u91cd\u65b0\u751f\u6210\u6570\u636e\u6587\u4ef6\uff0c\u91cd\u542fpure-ftpd\u670d\u52a1\u624d\u80fd\u751f\u6548<\/p>\n

2\u3001Pure-FTPd\u670d\u52a1\u5668\u542f\u7528\u52a0\u5bc6\u4f20\u8f93<\/p>\n

mkdir \/usr\/local\/pureftpd\/ssl #\u521b\u5efa\u52a0\u5bc6\u8bc1\u4e66\u5b58\u653e\u76ee\u5f55<\/p>\n

openssl req -x509 -nodes -days 7200 -newkey rsa:2048 -keyout \/usr\/local\/pureftpd\/ssl\/pure-ftpd.pem -out \/usr\/local\/pureftpd\/ssl\/pure-ftpd.pem #\u521b\u5efa\u8bc1\u4e66\uff0c\u6ce8\u518c\u4fe1\u606f\u53ef\u4ee5\u81ea\u5b9a\u4e49\u586b\u5199\uff0c\u6211\u4eec\u662f\u81ea\u5df1\u4f7f\u7528\uff0c\u4e0d\u9700\u8981\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u8ba4\u8bc1<\/p>\n

chmod 600 \/usr\/local\/pureftpd\/ssl\/pure-ftpd.pem #\u8bbe\u7f6e\u8bc1\u4e66\u6587\u4ef6\u6743\u9650<\/p>\n

\u5728Pure-FTPd\u914d\u7f6e\u6587\u4ef6\/usr\/local\/pureftpd\/etc\/pure-ftpd.conf\u4e2d\u8bbe\u7f6e\u542f\u7528\u8bc1\u4e66<\/p>\n

TLS 2 #\u652f\u6301\u52a0\u5bc6\u4f20\u8f93<\/p>\n

CertFile \/usr\/local\/pureftpd\/ssl\/pure-ftpd.pem #\u52a0\u5bc6\u8bc1\u4e66\u8def\u5f84<\/p>\n

#TLS\u548cCertFile\u8fd9\u4e24\u4e2a\u9009\u9879\u5fc5\u987b\u540c\u65f6\u542f\u7528\uff0cTLS\u7684\u503c\u4e3a1\u7684\u65f6\u5019\uff0c\u4e0d\u542f\u7528ssl\u52a0\u5bc6\uff0c\u503c\u4e3a2\u542f\u7528ssl\u52a0\u5bc6<\/p>\n

systemctl restart pure-ftpd.service #\u91cd\u542f<\/p>\n

\u81f3\u6b64\uff0cUbuntu 20.04.x\/Debian 10.x\u8bd1\u5b89\u88c5\u914d\u7f6ePure-FTPd\u670d\u52a1\u5668\u6559\u7a0b\u5b8c\u6210\u3002<\/strong><\/span><\/p>\n

 <\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\u8bf4\u660e\uff1a Pure-FTPd\u662f\u4e00\u6b3e\u5f00\u6e90\u7684FTP\u670d\u52a1\u5668\u8f6f\u4ef6\uff0c\u914d\u7f6e\u7b80\u5355\uff0c\u5b89\u5168\u9ad8\u6548\uff0c\u4e0b\u9762\u6211\u4eec\u5728CentOS 8.x\/R […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-3988","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/3988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3988"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/3988\/revisions"}],"predecessor-version":[{"id":4094,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/3988\/revisions\/4094"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}