Tatūnga tūmau FTP

I te wa e whakauru ana i te Linux mai i tetahi kete tohatoha, ko te kaiwhakamahi pakiaka anake ka waatea ma te taunoa. I te wa ano, kaore e taea e nga take haumaru te hono ma te FTP i raro i tenei kaiwhakamahi. I roto i tenei tuhinga, ka whakamarama matou me pehea te whakarite tere i tetahi tūmau FTP me te hanga i tetahi kaiwhakamahi ma te whakamahi i nga whakahau papatohu Linux anake.  

Hipanga 1: Whakaritea he hononga haumaru ki to tūmau

I te tuatahi, me hono koe ki to tūmau. Ka taea e koe tenei ma te whakamahi i te kawa SSH (Secure Shell), e whakarato ana i te huarahi uru mamao haumaru. Engari ki te takiuru hei 'pakiaka', koinei te kaute whakahaere i runga i te Linux ma te taunoa, whakamahia he putea auau me te whakahaere whakahau ma te 'sudo' mo te haumarutanga ake.  

Hipanga 2: Tāutahia te tūmau FTP

Ko te taahiraa e whai ake nei ko te whakaurunga FTP-tūmau. I roto i tenei akoranga, ka whakamahi tatou i te 'proftpd', he tūmau FTP puna tuwhera rongonui.

Mena kei te whakamahi koe i te CentOS, whakauruhia te putunga EPEL i te tuatahi. Whakauruhia nga whakahau e whai ake nei ki te tauranga:  

sudo yum install epel-release
sudo yum install proftpd

Mena kei te whakamahi koe i a Debian, Ubuntu ranei, pato noa:

sudo apt install proftpd

Hipanga 3: Whakaritea te whakarewanga FTP aunoa

Whai muri i te whakaurunga o te tūmau FTP, whirihorahia kia whakarewa aunoa i nga wa katoa ka putu te tūmau. Ka mahia tenei ma nga whakahau e whai ake nei:  

sudo systemctl start proftpd.service
sudo systemctl enable proftpd.service

Hipanga 4: Whakaritehia to papangaahi

Mo nga kaupapa haumarutanga, me whirihorahia to papangaahi kia taea ai e koe nga hononga taumai ki runga i te tauranga TCP 21. Ko te whakahau tika kei runga i te whaipainga whakahaere paahi e whakamahia ana e koe. Mo 'iptables':  

sudo iptables -I INPUT -p tcp -m tcp --dport 21 -j ACCEPT
sudo systemctl save iptables

mō 'pātūahi':  

sudo firewall-cmd --permanent --zone=public --add-port=21/tcp
sudo firewall-cmd –reload

mo 'nftables' ki Debian 11:  

sudo nft add rule ip filter input tcp dport { 21 } ct state new accept

I muri i te whirihora o te paahi ahi, kaua e wareware ki te tiaki i nga huringa kia tonohia i muri i te whakaara ano. Mo te 'iptables' me te 'firewalld' ka mahia aunoatia tenei, engari mo te 'nftables' me tiaki a ringa koe i nga ture o naianei ki tetahi konae ka utaina i te whakarewatanga o te punaha.  

Hipanga 5: Whakawhāitihia nga kaiwhakamahi FTP ma o raatau whaiaronga

Ma te taunoa, ka taea e nga kaiwhakamahi FTP te haere ki tua atu i o raatau raarangi aa-whare, he tupono haumarutanga. Hei aukati i tenei, taapirihia te raina DefaultRoot ~ ki te kōnae 'proftpd.conf'. Ka whakawhāitihia e tenei raina nga kaiwhakamahi ma o raatau whaiaronga. Tāpirihia ki te mutunga o te konae, ka whakaara ano i te tūmau FTP:  

sudo systemctl restart proftpd.service

Hipanga 6: Hanganga kaiwhakamahi FTP hou

Kua reri koe inaianei ki te hanga i tetahi kaiwhakamahi FTP hou. Kare e hiahiatia te uru anga whakahau, na reira whakakorehia mo nga take haumaru. Anei nga whakahau mo tera:  

sudo useradd [username] -d /home/[username] -m -s /usr/sbin/nologin

sudo passwd [username]

Whakakapia [ingoa kaiwhakamahi] ki te ingoa kaiwhakamahi e hiahiatia ana. Ma te tono 'passwd' e tuku ki a koe te whakauru kupuhipa mo te kaiwhakamahi hou.  

Kua whakaturia e koe he tūmau FTP me te hanga i tetahi kaiwhakamahi FTP hou i runga i te tūmau Linux. Me mahara tonu mo te haumarutanga i te wa e whakarite ana.