INSTALL,CONFIGURE AND TEST FTP


INSTALL,CONFIGURE AND TEST FTP

install vsftpd -ftp sever
yum install vsftpd

systemctl start vsftd

inorder to work this 1 st disable selinux - edit file
vim /etc/selinux/config

SELINUX=disabled

rebbot the machine to apply selinx changes

now edit vsftdd conf file

vim /etc/vsftpd/vsftd.conf
anonymous_enable means login anonymous users to download whatever they want from ftp server

local_umask=022
which sets the permission for users

anon_upload_enable
means anonymous upload from the users.u should not allow

logs stored:
/var/log/xferlog - by default

listen=NO
listen_ipv6=YES
by default it listens on ipv4 sockets.

in this ex used all the conf as it is but added below lines as a part of trouble shoting bcz had lot of problem with ftp,with fw for time being

add below

pasv_enable=YES     means passive mode for ftp is enabled
pasv_max_port=40000  maximum port to be 40000
pasv_min_port=40000  minimum port to be 40000 which means 1 port

### allow this rule in firewall

firewall-cmd --permanent --add-port=40000/tcp ###

## ftp uses 2 ports
one for communication and other for actual transfer of files ##

changed ftpd banner as well
ftpd_banner=welcome guest to my test ftpd server

restart vsftpd service bcz we made some changes
systemctl restart vsftpd

now allow port at firewall level
firewall-cmd --permanent --add-port=21/tcp

create file to download in ftp server

files location: var/ftp/pub

vi /var/ftp/pub/hi


now connect to this ftp server

linux: wget ftp://192.168.0.84/pub/hi
or
install ftp client in linux machine

yum install lftp

lftp 192.168.0.84
ls
u see pub
ls pub
u see hi
get hi

or login with user specified

lftp neelima@192.168.0.84
password: enter it
it got connected now
ls
it shows the home directory of that user
get -for download files

u can see system created users for ftp

cat /etc/passwd | grep "ftp"

windows machine
open terminal
cd C:/
open 192.168.0.84
asks for user and pwd
user: neelima
pwd: neelima
it got connected
it opens home directory of that user

ftp service uses port 21
ftp uses 2 ports
one for 21 for communication and other for transfer files here 40000


Comments

Post a Comment

Popular posts from this blog

zabbix-introduction

Image
Zabbix is an enterprise-class open source distributed monitoring solution. Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers excellent reporting and data visualisation features based on the stored data. This makes Zabbix ideal for capacity planning. Zabbix supports both polling and trapping. All Zabbix reports and statistics, as well as configuration parameters, are accessed through a web-based frontend. A web-based frontend ensures that the status of your network and the health of your servers can be assessed from any location. Properly configured, Zabbix can play an important role in monitoring IT infrastructure. This is equally true for small organisations with a few servers and for large companies with a multitude of servers. Zabbix i...
Read more

Power Broker

Every server running in your IT environment needs an account, and every account requires privileges. Many organizations take inadequate steps in managing privileged accounts – leaving them vulnerable to attack and opening the door to potentially devastating data breaches. Today, most breaches start with people installing something they shouldn’t, connecting to somewhere they shouldn’t, or accessing data they shouldn’t. What does all of this have in common? Privilege misuse and abuse. When users need elevated privileges on a Unix or Linux server, security admins often turn to free tools like Super User Do, or Sudo (“soo-doo”). Sudo enables privileged access without exposing the root password. But it has flaws. Like limited granularity, lack of data integrity and no log security. Its policies typically need to be managed on each server, making it hard to lock down and prone to tampering. With this ad-hoc tool, it’s virtually impossible to maintain security and compliance...
Read more