[Ubuntu] vsftpd 설치

 

sudo apt-get update

sudo apt-get upgrade

 

ftp 설치하기

sudo apt-get install vsftpd

 

sudo systemctl status vsftpd  

실행됨을 확인한다.

 

환경설정파일 수정

sudo nano /etc/vsftpd.conf 

 

listen=NO
listen_port=9028

listen_ipv6=YES
anonymous_enable=NO

local_enable=YES
write_enable=YES


use_localtime=YES

xferlog_enable=YES
xferlog_file=/var/log/vsftpd.log

connect_from_port_20=YES

chroot_local_user=YES
#chroot_list_enable=YES
# (default follows)
chroot_list_file=/etc/vsftpd.chroot_list
allow_writeable_chroot=YES


port_enable=YES
pasv_enable=YES

connect_from_port_20=YES
ftp_data_port=9027

pasv_min_port=30000
pasv_max_port=30010

userlist_enable=YES
userlist_file=/etc/vsftpd.user_list
userlist_deny=NO

 

user_sub_token=$USER

local_root=/var/www/$USER/html

 

local_umask=022 

(022는 업로드된 파일 권한을 644, 디렉토리를 755로 만들어준다.)

 

 

패시브모드로 설정되어 있다.

만약 접속은 되는데, 패시브모드에서 진행이 안되거나, 디렉토리 목록을 못 불러온다면

 

(1) 해당 폴더 소유자 권한을 준다.

sudo chown -R 사용자아이디:사용자아이디 폴더

sudo chmod -R 755 폴더

 

sudo chown -R user:user /var/www/user/html
sudo chmod -R 755 /var/www/user/html

 

(2) pasv_min_port = 30000 

     pasv_max_port = 30000  으로 포트를 동일하게 해본다.

 

다음으로

sudo nano /etc/vsftpd.chroot_list
sudo nano /etc/vsftpd.user_list

각각 파일을 만들고 한줄라인으로 접속자를 적어넣는다.

[ ftp 재가동 ]
sudo systemctl restart vsftpd


[ 방화벽 열기 ]

sudo ufw allow 9027:9028/tcp
sudo ufw allow 30000:30010/tcp


그런데, 해당 포트를 제거하려면 아래 형태와 같이 rule 제거후 삭제한다. 
sudo ufw deny 30000:30010/tcp
sudo ufw delete deny 30000:30010/tcp

[ 방화벽 재가동 ]

sudo ufw disable
sudo ufw enable



root@testubuntu:/etc# sudo ufw status
Status: active

To                         Action      From
--                         ------      ----
22                         ALLOW       Anywhere
22/tcp                     ALLOW       Anywhere
Nginx HTTP                 ALLOW       Anywhere
9027:9028/tcp              ALLOW       Anywhere
30000:30010/tcp            ALLOW       Anywhere
22 (v6)                    ALLOW       Anywhere (v6)
22/tcp (v6)                ALLOW       Anywhere (v6)
Nginx HTTP (v6)            ALLOW       Anywhere (v6)
9027:9028/tcp (v6)         ALLOW       Anywhere (v6)
30000:30010/tcp (v6)       ALLOW       Anywhere (v6)

 

 

root@dev:/home/dev# sudo ufw app list
Available applications:
  Nginx Full
  Nginx HTTP
  Nginx HTTPS
  OpenSSH

root@dev:/home/dev# sudo ufw allow 'Nginx Full'
Rule added
Rule added (v6)

root@dev:/home/dev# sudo ufw status
Status: active

To                         Action      From
--                         ------      ----
9027:9029/tcp              ALLOW       Anywhere
30000:30010/tcp            ALLOW       Anywhere
22/tcp                     ALLOW       Anywhere
22                         ALLOW       Anywhere
Nginx Full                 ALLOW       Anywhere
9027:9029/tcp (v6)         ALLOW       Anywhere (v6)
30000:30010/tcp (v6)       ALLOW       Anywhere (v6)
22/tcp (v6)                ALLOW       Anywhere (v6)
22 (v6)                    ALLOW       Anywhere (v6)
Nginx Full (v6)            ALLOW       Anywhere (v6)

 

 

 

 

 

 

 

참고 : https://jjeongil.tistory.com/2086

참고 : https://samsons.tistory.com/61