User Tools

Site Tools


servers:linux:vsftpd

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
servers:linux:vsftpd [2025/09/11 20:55] Sean Rhoneservers:linux:vsftpd [2025/09/11 21:45] (current) Sean Rhone
Line 16: Line 16:
 ====== Firewall ====== ====== Firewall ======
  
-  sudo firewall-cmd --add-service='vsftpd' --permanent && sudo firewall-cmd --reload+****
  
-  sudo firewall-cmd --info-service='vsftpd'+  sudo firewall-cmd --add-service='vsftpd' --permanent && sudo firewall-cmd --reload
  
 ====== Service ====== ====== Service ======
Line 36: Line 36:
 anonymous_enable=NO anonymous_enable=NO
 write_enable=YES write_enable=YES
- 
 listen=YES listen=YES
 listen_ipv6=NO listen_ipv6=NO
- 
 pasv_enable=YES pasv_enable=YES
-local_root=/srv/ftp+local_root=/srv/ftp/NAS1
 force_dot_files=YES force_dot_files=YES
  
 # End</code> # End</code>
- 
-===== Encryption Support ===== 
- 
-==== Generate Certs ==== 
- 
-  * Country: US 
-  * State: PA 
-  * Locality: Charleroi 
-  * Org Name: Realm of Espionage 
-  * Org Unit: NAS 
-  * YOUR Name: x 
-  * Email: x 
- 
-  sudo openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout '/etc/ssl/certs/vsftpd.pem' -out '/etc/ssl/certs/vsftpd.pem' && sudo chmod '600' '/etc/ssl/certs/vsftpd.pem' 
- 
-==== Enable Encryption ==== 
- 
-  * :!: ''ssl_ciphers'' can be set to ''HIGH'' or any supported OpenSSL cipher, but the higher the cipher, the higher the performance hit ((specifically on Oak with a Phenom II X4, ''HIGH'' caps around 60-70MB/s, whereas ''AES128-SHA'' is 70-80MB/s, and no encryption is 100-110MB/s)) 
- 
-  sudo -e '/etc/vsftpd/vsftpd.conf' && sudo systemctl restart 'vsftpd' 
- 
-<code> 
-ssl_enable=YES 
-allow_anon_ssl=NO 
-force_local_data_ssl=YES 
-force_local_logins_ssl=YES 
-require_ssl_reuse=YES 
- 
-ssl_ciphers=AES128-SHA 
-ssl_tlsv1=YES 
-ssl_sslv2=NO 
-ssl_sslv3=NO 
- 
-rsa_cert_file=/etc/ssl/certs/vsftpd.pem 
-rsa_private_key_file=/etc/ssl/certs/vsftpd.pem</code> 
  
 ====== fstab ====== ====== fstab ======
  
-  * [[linux:notes:disk_gpt_format|Disk Format (GPT)]]+  * [[linux:notes:disk_format_filesystems|Different FS Formats]]
   * [[linux:notes:rsync_nas|rsync]]   * [[linux:notes:rsync_nas|rsync]]
  
Line 94: Line 57:
 ===== fstab ===== ===== fstab =====
  
-  sudo mkdir -p '/var/ftp/nas1' && sudo -e '/etc/fstab'+  sudo mkdir -p '/srv/ftp/NAS1' && sudo -e '/etc/fstab'
  
-  sudo mkdir -p '/var/ftp/nas1' '/var/ftp/nas2' && sudo -e '/etc/fstab'+  sudo mkdir -p '/srv/ftp/NAS1' '/srv/ftp/NAS2' && sudo -e '/etc/fstab'
  
 <code> <code>
 # NAS # NAS
-PARTUUID=x /var/ftp/nas1 ext4 defaults,nofail 0 2 +UUID=x /srv/ftp/NAS1 xfs defaults,nofail 0 2 
-UUID=x /var/ftp/nas2 ntfs defaults,prealloc,windows_names,nofail 0 2</code>+#UUID=x /srv/ftp/NAS2 ntfs defaults,prealloc,windows_names,nofail 0 2 
 + 
 +# End</code>
  
   sudo systemctl daemon-reload && sudo mount --all && sync   sudo systemctl daemon-reload && sudo mount --all && sync
  
 ===== Safe Unmount Externals ===== ===== Safe Unmount Externals =====
 +
 +  sudo zypper install 'udisks2'
  
   sudo udisksctl unmount --force --block-device='/dev/sdb'   sudo udisksctl unmount --force --block-device='/dev/sdb'
Line 115: Line 82:
 ===== chown ===== ===== chown =====
  
-  sudo chown --recursive 'espionage724':'espionage724' '/var/ftp/nas1' && sync+  sudo chown -'espionage724':'espionage724' '/srv/ftp/NAS1' && sync
  
-  sudo chown --recursive 'espionage724':'espionage724' '/var/ftp/nas2' && sync+  sudo chown -'espionage724':'espionage724' '/srv/ftp/NAS2' && sync
  
 ===== chmod ===== ===== chmod =====
  
-  sudo chmod --recursive '774' '/var/ftp/nas1' && sync +  sudo chmod -'0700' '/srv/ftp/NAS1' && sync
- +
-  sudo chmod --recursive '774' '/var/ftp/nas2' && sync +
- +
-===== SELinux ===== +
- +
-  sudo restorecon -F -I -R '/var/ftp/nas1' && sync+
  
-  sudo restorecon -F -I -R '/var/ftp/nas2' && sync+  sudo chmod -R '0700' '/srv/ftp/NAS2' && sync
  
/srv/www/wiki/data/attic/servers/linux/vsftpd.1757638535.txt.gz · Last modified: by Sean Rhone