day1
1. FTP搭建与访问
2. 启用用户禁锢，黑白名单
3. 使用FTP黑白名单
4. FTP并发入带宽限制
1. FTP搭建与访问
-
安装软件包
yum install vsftpd -y -
启动服务
/etc/init.d/vsftpd start chkconfig vsftpd on -
测试
[root@localhost ~]# ftp localhost Trying ::1... ftp: connect to address ::1拒绝连接 Trying 127.0.0.1... Connected to localhost (127.0.0.1). 220 (vsFTPd 2.2.2) Name (localhost:root): ftp 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> dir 227 Entering Passive Mode (127,0,0,1,45,157). 150 Here comes the directory listing. drwxr-xr-x 2 0 0 4096 Apr 25 07:50 pub 226 Directory send OK. ftp>
2. 启用用户禁锢，黑白名单
-
启用用户禁锢
-
禁锢前
[root@localhost ~]# ftp localhost Trying ::1... ftp: connect to address ::1拒绝连接 Connected to localhost (127.0.0.1). 220 (vsFTPd 2.2.2) Name (localhost:root): lisi 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 227 Entering Passive Mode (127,0,0,1,204,55). 150 Here comes the directory listing. -rw-r--r-- 1 0 0 16 Apr 25 07:52 lisi.txt 226 Directory send OK. ftp> ls /etc/passwd 227 Entering Passive Mode (127,0,0,1,84,132). 150 Here comes the directory listing. -rw-r--r-- 1 0 0 1442 Apr 27 03:03 passwd -
修改配置文件
vim /etc/vsftpd/vsftpd.conf chroot_local_user=YES -
重新加载服务
/etc/init.d/vsftpd reload -
验证
useradd lisi echo 1 |passwd --stdin lisi ftp 127.0.0.1 Connected to 127.0.0.1 (127.0.0.1). 220 (vsFTPd 2.2.2) Name (127.0.0.1:root): lisi 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> dir 227 Entering Passive Mode (127,0,0,1,214,189). 150 Here comes the directory listing. -rw-r--r-- 1 0 0 16 Apr 25 07:52 lisi.txt 226 Directory send OK. ftp> cd /etc/ 550 Failed to change directory.
3.使用FTP黑白名单
-
使用黑名单
[root@localhost ~]# echo lisi >>/etc/vsftpd/ftpusers [root@localhost ~]# tail -1 /etc/vsftpd/ftpusers lisi ftp /etc/init.d/vsftpd reload [root@localhost ~]# ftp 127.0.0.1 Connected to 127.0.0.1 (127.0.0.1). 220 (vsFTPd 2.2.2) Name (127.0.0.1:root): lisi 331 Please specify the password. Password: 530 Login incorrect. Login failed. ftp> //在黑名单，所有登陆失败 -
使用白名单
vim /etc/vsftpd/vsftpd.conf userlist_deny=NO //仅允许列表中的用户 /etc/init.d/vsftpd reload -
清空原有记录，添加用户lisi
vim /etc/vsftpd/user_list lisi ftp anonymous //添加匿名用户 -
删除黑名单的lisi
vim /etc/vsftpd/ftpuser lisi -
测试
[root@localhost ~]# ftp localhost Trying ::1... ftp: connect to address ::1拒绝连接 Trying 127.0.0.1... Connected to localhost (127.0.0.1). 220 (vsFTPd 2.2.2) Name (localhost:root): ftp 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> dir 227 Entering Passive Mode (127,0,0,1,54,143). 150 Here comes the directory listing. drwxr-xr-x 2 0 0 4096 Mar 22 2017 pub 226 Directory send OK. ftp> exit 221 Goodbye.
4. FTP并发入带宽限制
max_clients：限制并发的客户端个数
max_per_ip：限制每个客户机IP的并发连接数
anon_max_rate：匿名最大速度（字节/秒）
local_max_rate：验证用户最大速率（字节/秒）
-
生成文件
cd /var/ftp/pub dd if=/dev/zero of=123 bs=1M count=100 -
限制并发连接数
vim /etc/vsftpd/vsftpd.conf max_clients=100 max_per_ip=2 /etc/init.d/vsftpd reload -
客户端测试
ftp localhost Trying ::1... ftp: connect to address ::1Connection refused Trying 127.0.0.1... Connected to localhost (127.0.0.1). 421 There are too many connections from your internet address. //连接限制超出 -
限制FTP传输速度
vim /etc/vsftpd/vsftpd.conf anon_max_rate=5000 local_max_rate=500000 /etc/init.d/vsftpd reload -
测试
[root@localhost ~]# wget ftp://127.0.0.1/pub/123 --2018-04-27 14:57:43-- ftp://127.0.0.1/pub/123 => “123” 正在连接 127.0.0.1:21... 已连接。 正在以 anonymous 登录 ... 登录成功！ ==> SYST ... 完成。 ==> PWD ... 完成。 ==> TYPE I ... 完成。 ==> CWD (1) /pub ... 完成。 ==> SIZE 123 ... 104857600 ==> PASV ... 完成。 ==> RETR 123 ... 完成。 长度：104857600 (100M) (非正式数据) 100%[==========================================>] 104,857,600 244M/s in 0.4s 2018-04-27 14:57:44 (244 MB/s) - “123” 已保存 [104857600]