linux下架设FTP服务器(vsftpd)
作者 佚名技术
来源 Linux系统
浏览
发布时间 2012-03-29
ge the default value for timing out a data connection. #data_connection_timeout=120 # #数据连接的超时值为120秒,无响应没断开 # It is recommended that you define on your system a unique user which the # ftp server can use as a totally isolated and unprivileged user. #nopriv_user=ftpsecure #处于非特权状态,默认是nobody # Enable this and the server will recognise asynchronous ABOR requests. Not # recommended for security (the code is non-trivial). Not enabling it, # however, may confuse older FTP clients. #async_abor_enable=YES #支持异步命令 # By default the server will pretend to allow ASCII mode but in fact ignore # the request. Turn on the below options to have the server actually do ASCII # mangling on files when in ASCII mode. # Beware that on some FTP servers, ASCII support allows a denial of service # attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd # predicted this attack and has always been safe, reporting the size of the # raw file. # ASCII mangling is a horrible feature of the protocol. #ascii_upload_enable=YES #ascii_download_enable=YES #表示上传和下载允许ASCII模式,容易被DOS攻击,默认是NO # # You may fully customise the login banner string: #ftpd_banner=Welcome to blah FTP service. #要显示的欢迎信息,可以隐藏服务器的相关信息,如果是文件后面可以根上信息文件的地址 # You may specify a file of disallowed anonymous e-mail addresses. Apparently # useful for combatting certain DoS attacks. #deny_email_enable=YES #拒绝使用邮件帐号作为匿名用户的登陆密码, # (default follows) #banned_email_file=/etc/vsftpd/banned_emails #目的是为了使自动工具失效 # You may specify an explicit list of local users to chroot() to their home # directory. If chroot_local_user is YES, then this list becomes a list of # users to NOT chroot(). #chroot_local_user=YES #chroot_list_enable=YES # (default follows) #chroot_list_file=/etc/vsftpd/chroot_list #允许转到上及目录 # You may activate the "-R" option to the builtin ls. This is disabled by # default to avoid remote users being able to cause excessive I/O on large # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume # the presence of the "-R" option, so there is a strong case for enabling it. #ls_recurse_enable=YES #ls -R 列出整个目录数的内容.是否充许,默认不允许,这样会加大服务器的负载,防止恶意攻击 # When "listen" directive is enabled, vsftpd runs in standalone mode and # listens on IPv4 sockets. This directive cannot be used in conjunction # with the listen_ipv6 directive. listen=YES # # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6 # sockets, you must run two copies of vsftpd with two configuration files. # Make sure, that one of the listen options is commented !! #listen_ipv6=YES # #以独立方式启用,但ipv4,ipv6不能在同一设置中同时设为yes # pam_service_name=vsftpd #pam 认证 /etc/pam.d/ userlist_enable=YES #表示拒拒绝在以下文件中的用 |
凌众科技专业提供服务器租用、服务器托管、企业邮局、虚拟主机等服务,公司网站:http://www.lingzhong.cn 为了给广大客户了解更多的技术信息,本技术文章收集来源于网络,凌众科技尊重文章作者的版权,如果有涉及你的版权有必要删除你的文章,请和我们联系。以上信息与文章正文是不可分割的一部分,如果您要转载本文章,请保留以上信息,谢谢! |
你可能对下面的文章感兴趣
上一篇: cpio.gz下一篇: linux中的进程管理命令
关于linux下架设FTP服务器(vsftpd)的所有评论