pure-ftpd 설치 및 설정(centos6)

Enteroa

9년 ago

1. pure-ftpd 다운로드 : http://download.pureftpd.org/pub/pure-ftpd/releases/

2. 압축 해제, 컴파일 및 selinux 끄기

~]# cd /opt

~]# tar xfzp pure-ftpd-1.0.36.tar.gz

~]# cd pure-ftpd-1.0.36

~]# ./configure --with-altlog --with-language=english --with-rfc2640 --with-ftpwho --with=tls --without-ldap --without-mysql --without-pgsql

~]# make && make install

~]# setsebool -P ftpd_use_passive_mode on

~]# setsebool -P ftp_home_dir on

~]# setenforce 0

3. /etc/pam.d/ftp 설정

#%PAM-1.0

auth required pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed

auth include system-auth

auth required pam_shells.so

account include system-auth

session include system-auth

session required pam_loginuid.so

4. TLS 통신 활성화를 위한 퍼블릭키 생성.

1 2	~]# ln -s /etc/pki/tls/certs /etc/ssl/private ~]# openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/pki/tls/certs/pure-ftpd.pem -out /etc/pki/tls/certs/pure-ftpd.pem

5. /etc/pure-ftpd/pure-ftpd.conf 설정

############################################################

# #

# Configuration file for pure-ftpd wrappers #

# #

############################################################

ChrootEveryone yes

BrokenClientsCompatibility no

MaxClientsNumber 50

Daemonize yes

MaxClientsPerIP 8

DontResolve yes

MaxIdleTime 15

UnixAuthentication yes

LimitRecursion 10000 8

AnonymousCanCreateDirs no

MaxLoad 4

Bind ,21

PassivePortRange 40003 40103

AntiWarez yes

AnonymousOnly no

NoAnonymous yes

AnonymousCantUpload yes

MaxDiskUsage 99

Umask 133:022

MinUID 500

UseFtpUsers no

AllowUserFXP no

AllowAnonymousFXP no

AllowDotFiles yes

VerboseLog no

SyslogFacility ftp

PIDFile /var/run/pure-ftpd.pid

AltLog w3c:/var/log/xferlog

CustomerProof yes

TLS 1

FileSystemCharset utf8

ClientCharset cp949

#UserBandwidth 8

#PAMAuthentication yes

#UserRatio 1 10

#ForcePassiveIP 192.168.0.1

#TrustedIP 10.1.1.1

#AnonymousRatio 1 10

#AnonymousBandwidth 8

#DisplayDotFiles yes

#ProhibitDotFilesWrite yes

#ProhibitDotFilesRead yes

#LogPID yes

#NoChmod yes

#KeepAllFiles yes

#CreateHomeDir yes

#Quota 1000:10

#CallUploadScript yes

#NoRename yes

#PerUserLimits 3:20

#NoTruncate yes

#IPV4Only yes

#IPV6Only yes

36번째줄 설정은 서버 인코딩셋에 따라 euckr 으로 지정해야 할수 있다.

echo $LANG 로 서버 인코딩셋을 확인하거나 /etc/stsconfig/i18n 을 확인하거나 수정 후에 맞추어 준다.

6. pure-ftpd 명령어 생성

~]# touch /etc/init.d/pure-ftpd

~]# chmod 700 /etc/init.d/pure-ftpd

~]# vi /etc/init.d/pure-ftpd

#!/bin/bash

# Startup script for the pure-ftpd FTP Server $Revision: 1.1 $

# chkconfig: - 85 15

# description: Pure-FTPd is an FTP server daemon based upon Troll-FTPd

# processname: pure-ftpd

# pidfile: /var/run/pure-ftpd.pid

# config: /etc/pure-ftpd/pure-ftpd.conf

# Source function library.

. /etc/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is configured.

[ ${NETWORKING} = "no" ] && exit 0

RETVAL=0

prog="pure-ftpd"

# Path to the pure-ftp binaries.

fullpath=/usr/local/sbin/pure-ftpd

pureftpwho=/usr/local/sbin/pure-ftpwho

pure_config=/etc/pure-ftpd/pure-ftpd.conf

pure_launch_script=/usr/local/sbin/pure-config.pl

start() {

echo -n $"Starting $prog: "

daemon "$pure_launch_script $pure_config --daemonize > /dev/null"

RETVAL=$?

[ $RETVAL = 0 ] && touch /var/lock/subsys/pure-ftpd

echo

}

stop() {

echo -n $"Stopping $prog: "

killproc pure-ftpd

RETVAL=$?

[ $RETVAL = 0 ] && rm -f /var/lock/subsys/pure-ftpd

echo

}

# See how we were called.

case "$1" in

start)

start

;;

stop)

stop

;;

restart)

stop

start

;;

reload)

echo -n $"Reloading $prog: "

killproc pure-ftpd -HUP

RETVAL=$?

echo

;;

condrestart)

if [ -f /var/lock/subsys/pure-ftpd ] ; then

stop

# avoid race

sleep 3

start

;;

status)

status pure-ftpd

RETVAL=$?

if [ -f $pureftpwho ] && [ $RETVAL -eq 0 ] ; then

$pureftpwho

;;

echo $"Usage: pure-ftpd {start|stop|restart|reload|condrestart|status}"

RETVAL=1

esac

exit $RETVAL

7. 데몬 시작 및 chkconfig 등록.

1 2	~]# /etc/init.d/pure-ftpd start ~]# chkconfig --level 2345 pure-ftpd on