FTP SERVER (File Transfer Protocol)

Trnh by: Trn Huy Cng

Gii thiu FTP Ci !t " C#u hnh FTP

SFTP ProFTPD

G$%$ TH$&' FTP server l dch v truyn file gia cc my tnh trn h thng m ng internet d!ng gia" th#c T$P%&P FTP h" t '(ng ) * ch+ '( active v ,assive Th-ng th./ng ,"rt *0 d!ng '1 truyn c"mmand v ,"rt *2 d!ng '1 truyn d liu

Trn Huy Cng

(CT$VE )*DE $lient 3h)i t " 3+t ni t4 un,rivileged ,"rt (N>1023) '+n server c"mmand ,"rt *0 $lient s5 l6ng nghe trn ,"rt N+1 v g7i c"mmand (PORT N+1) '+n server 8erver s5 3+t ni ng.9c l i v:i client ,"rt ;<0 d!ng l"cal ,"rt *2

Trn Huy Cng

P(SS$VE )*DE $lient 3h)i t " * 3+t ni t4 un,rivileged ,"rt (N v N+1 vi N > 1023) '+n server= P"rt ; s5 3+t ni v:i ,"rt *0 $lient g7i c"mmand PASV '1 th-ng >" ch" server d!ng ,assive m"de 8erver s5 rand"m ra ,"rt ?P @ 02*AB v g7i v ch" client $lient s5 3h)i t " 3+t ni t4 ,"rt ; <0 '+n ,"rt P cCa server '1 truyn d liu

Trn Huy Cng

P(SS$VE )*DE

Trn Huy Cng

T+) T,T FTP )*DE Dctive FTP E c"mmand E client @02*A F@ server *0 data E client @02*A GF server *2 Passive FTP E c"mmand E client @02*A F@ server *0 data E client @02*H F@ server @02*A

Trn Huy Cng

VSFTPD
Isft,d l dch v ft, trn h 'iu hnh J;&KL MinuN v:i OPM licensed
Iirtual &P c"nfigurati"ns Iirtual users 8tandal"ne "r Ninetd ",erati"n P"Perful ,erFuser c"nfigura>ility QandPidth thr"ttling PerFs"urceF&P c"nfigura>ility PerFs"urceF&P limits &PvR Sncry,ti"n su,,"rt thr"ugh 88M integrati"nT
Trn Huy Cng

Gii thiu FTP Ci !t " C#u hnh FTP

SFTP ProFTPD

C-$ ./T VSFTPD yum Fy install vsft,d File cUu hVnh chnh %etc%vsft,d%vsft,d=c"nf FTP f"lder mWc 'nh l %var%ft, Thay 'Xi FTP f"lder mWc 'nh ch" an"nym"us user d!ng ",ti"n anon_root=<path>

Trn Huy Cng

C#u hnh VSFTPD $h" ,hY, an"nym"us user u,l"ad anon !o"#_$na%&$='(S )rit$_$na%&$='(S anon_"p&oa*_$na%&$='(S ;"teE th. mc ,hZi c[ \uyn Prite

Trn Huy Cng

C#u hnh VSFTPD $h" ,hY, an"nym"us user c[ \uyn t " th. mc anon_!+*ir_)rit$_$na%&$='(S $h" ,hY, an"nym"us user N[a file v th. mc anon_oth$r_)rit$_$na%&$='(S

Trn Huy Cng

C#u hnh VSFTPD ]u c^u l"gin v:i user h thng anon !o"#_$na%&$=NO &o,a&_root=<path> _h-ng ch" ,hY, tUt cZ user ra 3h`i th. mc gc FTP ,hroot_&o,a&_"#$r='(S

Trn Huy Cng

C#u hnh VSFTPD $h" ,hY, m(t s user ra 3h`i th. mc FTP gc ,hroot_&o,a&_"#$r='(S ,hroot_&i#t_$na%&$='(S ,hroot_&i#t_-i&$=.$t,.v#-tp*.,hroot_&i#t T " file %etc%vsft,d%chr""talist v thm tn user ch" ,hY, ra 3h`i th. mc FTP gc

Trn Huy Cng

V$RT'(0 'SER Iirtual user l nhng user 3h-ng ,hZi user cCa uniNL cc user ny chb tcn t i cCa FTP v '.9c chia sd gia FTP v ee>server a,ache $Uu hVnh virtual user v cc h"me direct"ry ch" nhng user '[ '1 ch" ,hY, ft, truy cf, v" cc Pe>site 3hc nhau cCa Pe>server $c user 3hi l"gin s5 v" th. mc FTP h"me cCa user '[ v t"n \uyn trn th. mc '[ nh.ng 3h-ng '.9c di chuy1n \ua th. mc 3hc
Trn Huy Cng

C1' H23H V$RT'(04'SER &nstall ,amF,Pdfile T " file %etc%,am=d%vsft,dFvirtual / 0"#to!i1$* &o2in "#in2 htpa##)* -i&$ a"th r$3"ir$* pa!_p)*-i&$4#o p)*-i&$ .$t,.v#-tp*.htpa##)* a,,o"nt r$3"ir$* pa!_p$r!it4#o

Trn Huy Cng

C1' H23H V$RT'(04'SER $hbnh s7a file cUu hVnh %etc%vsft,d%vsft,d=c"nf

anon !o"#_$na%&$=NO &o,a&_$na%&$='(S 2"$#t_$na%&$='(S virt"a&_"#$_&o,a&_priv#='(S )rit$_$na%&$='(S pa!_#$rvi,$_na!$=v#-tp*5virt"a& "#$r_#"%_to+$n=67S(R &o,a&_root=.var.))).ht!&.67S(R ,hroot_&o,a&_"#$r='(S hi*$_i*#='(S &i#t$n='(S &o,a&_"!a#+=022
Trn Huy Cng

C1' H23H V$RT'(04'SER Thm user v" cg s) d liu FTPFD,ache ht,assPd hc %etc%vsft,d%ht,assPd Gusername@ T " f"lder %var%PPP%html%Gusername@ Thay 'Xi chC v nh[m s) hu l 5t6 ch" cc th. mc '[

Trn Huy Cng

C1' H23H FTP o78r SS0 T " certificate ch" server ",enssl re\ FNi2j Fn"des Fdays ARi FneP3ey rsaE02*H F3ey"ut %etc%vsft,d%vsft,d=,em F"ut %etc%vsft,d%vsft,d=,em Not$8 0o!!on Na!$8 & 9:a ,h; <P ha ho#tna!$ ,=a >TP #$rv$r

Trn Huy Cng

C1' H23H FTP o78r SS0 Thm v" file cUu hVnh cc ",ti"n
##&_$na%&$='(S a&&o)_anon_##&='(S -or,$_&o,a&_*ata_##&='(S -or,$_&o,a&_&o2in#_##&='(S ##&_t&#v1='(S ##&_##&v2=NO ##&_##&v3=NO r#a_,$rt_-i&$=.$t,.v#-tp*.v#-tp*4p$! r$3"ir$_##&_r$"#$=NO
Trn Huy Cng

Gii thiu FTP Ci !t " C#u hnh FTP

SFTP ProFTPD

9FTP M m(t ,h^n cCa k,en88l vi+t t6t cCa 8ecure File Transfer Pr"t"c"l m!ng c"mmand sft, h"Wc sc,

Trn Huy Cng

Gii thiu FTP Ci !t " C#u hnh FTP

SFTP ProFTPD

C-$ ./T PR*FTPD m"Pnl"ad s"urce t i OiZi nYn v v" f"lder =%c"nfigure ma3e ma3e install m!ng lnh ,r"ft,d '1 start dch v

Trn Huy Cng

C1' H23H PR*FTPD Thay 'Xi th. mc mWc 'nh ch" an"nym"us

Trn Huy Cng

C1' H23H PR*FTPD Thay 'Xi \uyn h n ch" an"nym"us

<Directory *> <Limit WRITE> DenyAll </Limit> <Limit STOR> Allo All </Limit> </Directory>

Trn Huy Cng

C1' H23H PR*FTPD

<Directory iforno> <Limit WRITE > Allo All </Limit> </Directory>

$Uu hVnh trn ch" 'Wt tr"ng GDn"nym"us@ G%Dn"nym"us@ ch" ,hY, an"nym"us user c[ \uyn Prite trn th. mc if"rn" v c[ \uyn u,l"ad ?8TknB nh.ng 3h-ng c[ \uyn Prite trn cc th. mc con l i
Trn Huy Cng

:'EST$*3 " TH(3; <*' F*R <*'R (TTE3T$*3