share my linux notes

lists of ftp commands. download the PDF file from : https://www.dropbox.com/s/ospqe1iwzo6dyty/ftp_commands.pdf

enabling selinux policy for ftp access check the current status of selinux policy : # getenforce check the ftp policy status : # getsebool -a | grep ftp which usually returns the following output : allow_ftpd_anon_write –> off allow_ftpd_full_access –> off allow_ftpd_use_cifs –> off allow_ftpd_use_nfs –> off allow_tftp_anon_write –> off ftp_home_dir --> off                               (change that to on)                                                                    ...

here the notes about configurations setting for vsftp daemon vsftpd defaults 1. port default : tcp/udp 21 & 20 2. main configuration files : /etc/vsftpd/vsftpd.conf 3. users that are not allowed to login via ftp : /etc/vsftpd/ftpusers turn on verbose vsftpd log format. the default log is /var/log/vsftpd.log log_ftp_protocol = YES create warning banners for all ftp users banner_file = /etc/vsftpd/issue (where file 'issue' is located on /etc/vsftpd/) add additional users to ftp server to login, upload and download files # useradd -c 'FTP USER oracle' -m belogix # passwd belogix local_enable = YES

as default root directory for vsftpd is located in /var/ftp/pub/. to change the defaults do this step : # /etc/vsftpd/vsftpd.conf add the line below anon_root = your_directory example anon_root = /home/user/ftp/ # /etc/selinux/config set selinux to disable/permissive mode

vsftpd modul helper (ip_conntrack) # /etc/sysconfig/iptables add the lines to open port tcp 21 for vsftpd -A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT # /etc/sysconfig/iptables-config edit the lines below # Load additional iptables modules (nat helpers) # Default: -none- # # IPTABLES_MODULES="ipconntrack_ftp ip_nat_ftp" # # restart service # service iptables restart The ip conntrack ftp module is used by iptables to listen to traffic and allow connections to the data ports (20). This allows an FTP server to operate on a machine which is running a firewall. Without this option passive ftp will not work. Another option is just skip this module assign min and max pass ranges in vsftpd and open those ports. source: http://www.cyberciti.biz/tips/rhel-fedora-centos-vsftpd-installation.html