{"id":18516,"date":"2014-10-12T06:00:17","date_gmt":"2014-10-11T22:00:17","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/10\/12\/banana-pi-%e6%b8%ac%e8%a9%a6-%e5%ae%89%e8%a3%9d-vsftpd-server\/"},"modified":"2014-10-12T06:00:17","modified_gmt":"2014-10-11T22:00:17","slug":"banana-pi-%e6%b8%ac%e8%a9%a6-%e5%ae%89%e8%a3%9d-vsftpd-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/10\/12\/banana-pi-%e6%b8%ac%e8%a9%a6-%e5%ae%89%e8%a3%9d-vsftpd-server\/","title":{"rendered":"Banana Pi \u6e2c\u8a66 – \u5b89\u88dd vsftpd Server"},"content":{"rendered":"

\u5b89\u88dd vsftpd FTP Server
# apt-get install vsftpd<\/span>
\u9032\u884c\u8a2d\u5b9a\uff0cvsftpd FTP Server \u7684\u8a2d\u5b9a\u6a94\u5728 \/etc\/vsftpd.conf<\/span>
\u53d6\u6d88\u533f\u540d\u8005\u767b\u5165
# sed -i ‘s\/anonymous_enable=YES\/#anonymous_enable=YES\/’ \/etc\/vsftpd.conf
<\/span>
\u8b93\u7cfb\u7d71\u4e2d\u7684\u4f7f\u7528\u8005\u53ef\u4ee5\u767b\u5165
# sed -i ‘s\/#local_enable=YES\/local_enable=YES\/’ \/etc\/vsftpd.conf<\/span><\/p>\n

\u53ef\u4ee5\u5beb\u5165
# sed -i ‘s\/#write_enable=YES\/write_enable=YES\/’ \/etc\/vsftpd.conf[@more@]<\/span>
\u7cfb\u7d71\u8a18\u9304\u6a94
# sed -i ‘s|#xferlog_file=\/var\/log\/vsftpd.log|xferlog_file=\/var\/log\/vsftpd.log|’ \/etc\/vsftpd.conf<\/span>

<\/span>vsftpd FTP Server \u767b\u5165\u6642\u986f\u793a\u7684 Banner
# sed -i ‘s\/#ftpd_banner=Welcome to blah FTP service.\/ftpd_banner=Welcome to Banana Pi FTP service.\/’ \/etc\/vsftpd.conf<\/span><\/p>\n

chroot \u7cfb\u7d71\u7684\u4f7f\u7528\u8005
# sed -i ‘120s\/#chroot_local_user=YES\/chroot_local_user=YES\/’ \/etc\/vsftpd.conf<\/span>
\u555f\u7528 chroot \u7684\u529f\u80fd
# sed -i ‘s\/#chroot_list_enable=YES\/chroot_list_enable=YES\/’ \/etc\/vsftpd.conf<\/span>
\u5efa\u7acb \/etc\/vsftpd.chroot_list \u8a2d\u5b9a\u6a94
# touch \/etc\/vsftpd.chroot_list<\/span><\/p>\n

\u8b93 root \u53ef\u4ee5\u767b\u5165
# sed -i ‘s\/root\/#root\/’ \/etc\/ftpusers<\/span><\/p>\n

\u555f\u52d5 vsftpd FTP Server
# \/etc\/init.d\/vsftpd start<\/span><\/p>\n

\u5728\u9632\u706b\u7246\u4e2d\u958b\u555f vsftpd FTP Server
iptables -A INPUT -i eth0 -p tcp –dport 21 -j ACCEPT<\/span>
iptables -A INPUT -i ppp0 -p tcp –dport 21 -j ACCEPT<\/span><\/p>\n

\u8a2d\u5b9a fail2ban \u7684 ftp \u963b\u64cb\u529f\u80fd
# vim \/etc\/fail2ban\/jail.conf<\/span>
[vsftpd]<\/span><\/p>\n

enabled\u00a0 = true<\/span><\/span>
port\u00a0\u00a0\u00a0\u00a0 = ftp,ftp-data,ftps,ftps-data<\/span>
filter\u00a0\u00a0 = vsftpd<\/span>
logpath\u00a0 = \/var\/log\/vsftpd.log<\/span>
# or overwrite it in jails.local to be<\/span>
# logpath = \/var\/log\/auth.log<\/span>
# if you want to rely on PAM failed login attempts<\/span>
# vsftpd’s failregex should match both of those formats<\/span>
maxretry = 3<\/span>
bantime\u00a0 = 86400<\/span><\/p>\n

\u91cd\u65b0\u555f\u52d5 fail2ban
# \/etc\/init.d\/fail2ban restart<\/span><\/p>\n

\u76ee\u524d\u5df2\u7d93\u6709\u4e8c\u500b\u963b\u64cb\u7684\u898f\u5247 ssh, vsftpd
# fail2ban-client status<\/span>
Status<\/span>
|- Number of jail:\u00a0\u00a0\u00a0\u00a0\u00a0 2<\/span>
`- Jail list:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 vsftpd<\/span>, ssh<\/span><\/span><\/p>\n

\u53ef\u4ee5\u5728 vsftpd \u5217\u51fa\u6709\u5075\u6e2c\u5230\u7684\u9023\u7dda\u653b\u64ca
# fail2ban-client status vsftpd<\/span>
Status for the jail: vsftpd<\/span>
|- filter<\/span>
|\u00a0 |- File list:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/var\/log\/vsftpd.log<\/span>
|\u00a0 |- Currently failed: 0<\/span>
|\u00a0 `- Total failed:\u00a0\u00a0\u00a0\u00a0 0<\/span>
`- action<\/span>
\u00a0\u00a0 |- Currently banned: 0<\/span>
\u00a0\u00a0 |\u00a0 `- IP list:<\/span>
\u00a0\u00a0 `- Total banned:\u00a0\u00a0\u00a0\u00a0 0<\/span><\/p>\n

\u5728\u9632\u706b\u7246\u898f\u5247\u4e0a\u7684\u898f\u5247
# iptables -t filter -L fail2ban-vsftpd -n<\/span>
Chain fail2ban-vsftpd (1 references)<\/span>
target\u00a0\u00a0\u00a0\u00a0 prot opt source\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 destination<\/span>
RETURN\u00a0\u00a0\u00a0\u00a0 all\u00a0 —\u00a0 0.0.0.0\/0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\/0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u5b89\u88dd vsftpd FTP Server# apt-get install vsftpd\u9032\u884c\u8a2d\u5b9a\uff0cvsftpd … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008Banana Pi \u6e2c\u8a66 – \u5b89\u88dd vsftpd Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[162],"tags":[],"class_list":["post-18516","post","type-post","status-publish","format-standard","hentry","category-c-83744"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["519443"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18516"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18516"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18516\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}