How to configure Secure FTP server in Linux Centos

Hello friends today we are going to discuss with you how to install ftp server in your Linux , so as we know ftp server is used to transfer files

So here is ftp service profiles

Type:System V-managed service 
Package:vsftpd 
Daemon:/usr/sbin/vsftpd
Script:/etc/init.d/vsftpd
Ports:21(ftp),20(ftp-data)
Configuration files:/etc/vsftpd/vsftpd.conf,/etc/vsftpd/ftpusers,/etc/pam.d/vsftpd
Log:/var/log/xferlog
Related:tcp_wrappers,ip_conntrack_ftp,ip_nat_ftp
default selinux daemon= /var/ftp

& here we are going to discus how to use ftp account by anyone who don't have account on Linux i.e remote user & as well by local users how have account so Let's start configurations 

step 1: we need to login as root user in your Linux machine & then type following commands yum install vsftpd-* -y 

Step 2: Now follows these commands 

# service vsftpd start    ( To Start vsftpd service    )
# chkconfig vsftpd on   ( To Auto start after reboot )
# service vsftpd restart ( To Restart vsftpd service )

                         
Step 3 : Now we need to configure the vsftpd.conf  file

open vsftpd.conf with editor you want vi , gedit , nano etc. as you are using & edit it

:') > If we want to Restrict anonymous user login : 

to do so just anonymous_enable=YES ( Replace YES with NO flag )
save & restart service again
# service vsftpd restart 

:') > If we want to restrict Local user login :
to do so just uncomment  # local_enable=YES ( remove # )
save & restart service

:') > If you want to restrict local user to change root :

as we knows a local user can use root dir "/" so here is our security effects , if you are not restricting local users to access root dir then it will become a security breach & anyone can access all dir in the root dir. So how to config this  # chroot_list_enable=YES ( remove # ) &  # chroot_list_file=/etc/vsftpd/chroot_list ( remove # ) save & quit

Now edit chroot_list file

# vi /etc/vsftpd/chroot_list
type username
save & quite
# service vsftpd restart

:') > If you want a single users login :

to restrict a single user to login we need to edit ftpusers file as
# vi /etc/vsftpd/ftpusers
type username
save & quit

now it ask password and deny login

or we can edit user_list  too as
# vi /etc/vsftpd/user_list
type username
save & exit

now it deny access without asking

Step 4 : Now we need to set upload permissions for anonymous user :

mkdir -p /var/www/null_ftp
chgrp ftp /var/www/null_ftp
chmod g+w /var/www/null_ftp
chcon -Rt public_content_t /var/www/null_ftp
chcon -t public_content_rw_t /var/www/null_ftp

now we need to edit vsftpd.conf file
#anon_upload_enable=YES ( remove # )
save & quit

Step 5: If you want to give permission for anonymous user to creat directories:
Simple we need to edit vsftpd.conf file
#anon_mkdir_enable=YES( remove # )

Step 6 : If you want show any banner page :
now again we need to edit vsftpd.conf 
#ftpd_banner=welcome to blah ftp service ( Remove # & type your matter you want to show ) 
save & quit

ok now we can use our ftp server

Client commandline connection :
Now as we want to connect on other end in Client machine so what to do this
we just need to type ftp <ip address> 

when you are using as local user then give your username & password else if you want to login as anonymous user you just simply need to connect simply without password

thnx & njoy Configuration 

Posted in: CentOS