Saitin uwar garken FTP

Lokacin shigar da Linux daga kowane kayan rarrabawa, tushen mai amfani kawai zai kasance ta tsohuwa. A lokaci guda, dalilan tsaro ba za su sa a sami damar haɗi ta hanyar FTP a ƙarƙashin wannan mai amfani ba. A cikin wannan labarin, zamuyi bayanin yadda ake sauri saita sabar FTP kuma ƙirƙirar mai amfani ta amfani da umarnin Linux console kawai.  

Mataki 1: Kafa amintaccen haɗi zuwa uwar garkenka

Da farko, kuna buƙatar haɗi zuwa uwar garken ku. Kuna iya yin wannan ta amfani da ka'idar SSH (Secure Shell), wacce ke ba da amintacciyar hanyar shiga nesa. Maimakon shiga azaman 'tushen', wanda shine asusun gudanarwa akan Linux ta tsohuwa, yi amfani da asusun yau da kullun kuma gudanar da umarni ta hanyar 'sudo' don ƙarin tsaro.  

Mataki 2: Shigar uwar garken FTP

Mataki na gaba shine shigar FTP-uwar garken. A cikin wannan koyawa, za mu yi amfani da 'proftpd', sanannen uwar garken FTP mai buɗaɗɗen tushe.

Idan kana amfani da CentOS, fara shigar da ma'ajiyar EPEL. Shigar da umarni masu zuwa a cikin tashar tashar:  

sudo yum install epel-release
sudo yum install proftpd

Idan kana amfani da Debian ko Ubuntu, kawai rubuta:

sudo apt install proftpd

Mataki na 3: Saita ƙaddamar da FTP ta atomatik

Bayan shigar da uwar garken FTP, saita shi don farawa ta atomatik duk lokacin da uwar garken ya yi takalma. Ana aiwatar da wannan ta hanyar umarni masu zuwa:  

sudo systemctl start proftpd.service
sudo systemctl enable proftpd.service

Mataki 4: Saita Tacewar zaɓi

Don dalilai na tsaro, dole ne a saita Firewall ɗinka ta irin wannan hanya don ba da damar haɗin kai mai shigowa a tashar tashar TCP 21. Madaidaicin umarnin ya dogara da abin da ake amfani da shi na sarrafa tacewar wuta. Don 'iptables':  

sudo iptables -I INPUT -p tcp -m tcp --dport 21 -j ACCEPT
sudo systemctl save iptables

don 'firewalld':  

sudo firewall-cmd --permanent --zone=public --add-port=21/tcp
sudo firewall-cmd –reload

don 'nftables' a Debian 11:  

sudo nft add rule ip filter input tcp dport { 21 } ct state new accept

Bayan an saita Firewall, kar a manta da adana canje-canjen don su yi amfani da su bayan sake kunnawa. Don 'iptables' da 'firewalld' ana yin hakan ta atomatik, yayin da 'nftables' kuna buƙatar adana ƙa'idodin yanzu da hannu zuwa fayil ɗin da za a loda a lokacin ƙaddamar da tsarin.  

Mataki na 5: Ƙuntata masu amfani da FTP ta kundin adireshin gida

Ta hanyar tsoho, masu amfani da FTP za su iya wuce kundin adireshi na cikin gida, wanda zai iya zama haɗarin tsaro. Don hana wannan, ƙara layin DefaultRoot ~ zuwa fayil ɗin 'proftpd.conf'. Wannan layin yana ƙuntata masu amfani ta hanyar kundin adireshi na gida. Ƙara shi zuwa ƙarshen fayil ɗin, sannan sake kunna sabar FTP:  

sudo systemctl restart proftpd.service

Mataki 6: Sabbin ƙirƙirar mai amfani da FTP

Yanzu kun shirya don ƙirƙirar sabon mai amfani da FTP. Ba ya buƙatar samun izinin harsashi, don haka kashe shi saboda dalilai na tsaro. Anan ga umarnin don haka:  

sudo useradd [username] -d /home/[username] -m -s /usr/sbin/nologin

sudo passwd [username]

Sauya [sunan mai amfani] da sunan mai amfani da ake so. Umurnin 'passwd' zai ba ku damar shigar da kalmar sirri don sabon mai amfani.  

Yanzu kun kafa sabar FTP kuma kun ƙirƙiri sabon mai amfani da FTP akan sabar Linux. Koyaushe tuna game da tsaro yayin kafawa.