vsFTP in Linux
Introduction to FTP
The File Transfer Protocol (FTP) is used as one of the most common means of copying files between servers over the Internet. Regular FTP
The VSFTP allows Linux users to copy files to and from their home directories with an FTP client. Anonymous FTP a username of anonymous and your email address for the password. Once logged in to a FTP server, you automatically have access to only the default anonymous FTP directory
Anonymous FTP
Start VSFTP
Use the chkconfig command to configure VSFTP to start at boot:
chkconfig vsftpd on
Use service vsftpd to start,stop, and restart VSFTP after booting:
service vsftpd start service vsftpd stop service vsftpd restart
Configuration file: /etc/vsftpd/vsftpd.conf
Anonymous FTP settings
Before going to change vsftpd.conf, remember to make a backup:
cp vsftpd.conf vsftpd.conf.bak Allow Anonymous Allow Anonymous upload Allow Anonymous upload to create directory
anonymous_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
Anonymous FTP settings (2)
no_anon_password=YES
Do not ask password for anonymous login
anon_max_rate=30000
Limit the transfer rate of anonymous, e.g. 30000 = 30k byte per second
Directory for anonymous is /var/ftp
anon_root=/data/directory
Local users settings
local_enable=YES
Allow Linux users to use VSFTPD
chroot_list_enable=YES
VSFTPD will use a file to limit some users to change their home directories after login
chroot_list_file=/etc/vsftpd/chroot_list
A text file which contain a list of Linux usernames. These users will limit to their home directories
Local users settings (2)
userlist_deny=YES
VSFTPD will use a file to reject some users.
userlist_file=/etc/vsftpd/user_list
A text file which contain a list of Linux usernames which DO NOT allow to use VSFTP.
Limit the transfer rate of local user, e.g. 30000 = 30k byte per second
local_max_rate=30000
Other Settings
max_clients=10
Limiting the maximum number of client connections
max_per_ip=1
Limiting the number of connections by same IP address
Disconnect the idle connection after 600 seconds. Record all the file transfer records. Filename and directory of log file.
idle_session_timeout=600
xferlog_enable=YES
xferlog_file=/var/log/vsftpd.log
Limit the access on hosts
FTP server usually can use tcp_wrappers to allow or deny a hosts access. Add this statement to vsftpd.conf:
tcp_wrappers = yes
vsftpd : 192.168.1.0/24 192.168.0.2 vsftpd : .vtc.edu.hk alan.ict.edu.hk
Under /etc, create a new file hosts.deny:
If you want to allow a specific host, create a hosts.allow with same format.
Samba Windows File Server in Linux
Introduction of Samba
Samba is a server that allows your Linux to share files with Windows. Samba can make your Linux into a Windows Primary Domain Controller (PDC) or a server for a Windows Workgroup. Samba can make users to access their Linux home directory with Windows.
Start Samba
Use the chkconfig command to configure Samba to start at boot:
chkconfig smb on
Use service smb to start,stop, and restart Samba after booting:
service smb start service smb stop service smb restart
Configuration file: /etc/samba/smb.conf
Swat tools to configure Samba
Before going to change smb.conf, remember to make a backup:
cp smb.conf smb.conf.bak
Swat, Samba's web based configuration tool enables you configure your smb.conf file without you needing to remember all the formatting. Configuration file of swat: /etc/xinetd.d/swat
Configure Swat
To limit the use of swat, add only_from service swat statement to swat configuration file. {
port socket_type protocol wait user server log_on_failure disable only_from } = 901 = stream = tcp = no = root = /usr/sbin/swat += USERID = no = localhost 192.168.1.3
In above case, only allow localhost and PC
[global] section
workgroup = tyict
The name of the Windows domain we'll create.
server string = Linux Samba Server
Server Description (show on browser)
Computer Name show on network browser
netbios name = mySamba1
[global] section (2)
client code page = 950
Important! View Chinese filename in Windows. Log filename and location. File size of log file, 500 = 500Kb
log file = /var/log/samba/log.%m
max log size = 500
[global] section (3)
security = user
User level security (request username and password), strongly recommended. Protect your password Filename and location of password file
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
[homes] section
read only = No
Allows the samba user to also write to their Samba Linux directory.
browseable = No
Doesn't allow others to browse the contents of the directory
Makes new files created by the user to have 744" permissions. You want to change this to "0700" so that only the login user has access to files. Makes new sub-directories created by the user to have "775" permissions. You want to change this to "0700" so that only the login user has access to directories.
create mode = 0744
directory mode = 0755
[MyShare] section
You can create a new section to share a folder in Linux. [MyShare] Sample configuration: path = /share/pub
read only = public = writable = create mode directory mode no yes yes = 0664 = 0775
public = yes
Samba Users
A Linux user cannot directly use Sambas share folders. We need to convert a Linux user to a Samba user:
smbpasswd -a linuxuser Disable a user
smbpasswd -d username
smbpasswd -e username
Enable a disabled user
Delete a user
smbpasswd -x username
We cannot add a NON LINUX USER!
IIS Internet Information Service in WindowsXP Professional
http, ftp services in WindowsXP
IIS is an additional functions of Windows XP Professional. You cannot find this service in Windows XP Home. This service allow only ten connections. For enterprise purpose, you should use IIS of Windows 2003 Server.
http service
Open the Start Menu and go to Programs > Administrative Tools > Internet Services Manager. Once the IIS page opens, find the name of the computer and click the plus (+) sign next to it. This will display the FTP, HTTP, and SMTP Virtual Server icons. Click on the Default Web Site icon to
http service (2)
Right-click the Default Web Site icon and choose Properties. From this page, the user can configure all the properties and control what will be displayed on the HTTP site. You will find that the default home page is default.htm and the folder contain wwwroot is C:\inetpub.
Summary/ Conclusion
Detailed Summary or Conclusion about Data Communication
AIM&IT
Question & Answers
Question & Answer for the session
AIM&IT
