Dejinta server-ka FTP

Marka la rakibo Linux qalab kasta oo qaybinta, kaliya isticmaala xididka ayaa la heli doonaa si caadi ah. Isla mar ahaantaana, sababaha ammaanku suurtogal kama dhigi doonaan in lagu xidho FTP hoosta isticmaalaha. Maqaalkan, waxaan ku sharixi doonaa sida dhakhsaha leh ee loo sameeyo server-ka FTP oo loo abuuro isticmaale isticmaalaya kaliya amarrada console Linux.  

Talaabada 1: Samee xidhiidh sugan seerfarkaaga

Marka hore, waxaad u baahan tahay inaad ku xidho server-kaaga. Waxa aad taas ku samayn kartaa adiga oo isticmaalaya nidaamka SSH (Secure Shell), kaas oo siinaya hab ammaan ah oo meel fog laga galo. Halkii aad u geli lahayd 'root', kaas oo ah koontada maamulka ee Linux si caadi ah, isticmaal akoon joogto ah oo ku socodsii amarrada 'sudo' amniga dheeraadka ah.  

Tallaabada 2: Ku rakib server-ka FTP

Talaabada xigta waa rakibida FTP-server. Tababarkan, waxaan ku isticmaali doonaa 'proftpd', oo ah serfer FTP ah oo caan ah oo furan.

Haddii aad isticmaalayso CentOS, ku rakib kaydka EPEL marka hore. Geli amarradan soo socda terminalka:  

sudo yum install epel-release
sudo yum install proftpd

Haddii aad isticmaalayso Debian ama Ubuntu, kaliya ku qor:

sudo apt install proftpd

Talaabada 3: Deji furaha FTP oo toos ah

Ka dib markii la rakibo server-ka FTP, u habbee si uu si toos ah u bilaabo mar kasta oo server-ka kabaha. Tan waxaa lagu fuliyaa amarada soo socda:  

sudo systemctl start proftpd.service
sudo systemctl enable proftpd.service

Talaabada 4: Samee firewall-kaaga

Ujeedooyinka amniga, firewall-kaaga waa in loo habeeyaa si loogu oggolaado isku xirka soo socda ee dekedda TCP 21. Amarka saxda ah wuxuu ku xiran yahay utility management firewall aad isticmaalayso. Loogu talagalay 'iptables':  

sudo iptables -I INPUT -p tcp -m tcp --dport 21 -j ACCEPT
sudo systemctl save iptables

loogu talagalay 'firewalld':  

sudo firewall-cmd --permanent --zone=public --add-port=21/tcp
sudo firewall-cmd –reload

loogu talagalay 'nftables' Debian 11:  

sudo nft add rule ip filter input tcp dport { 21 } ct state new accept

Ka dib markii dab-damiska la habeeyo, ha ilaawin inaad kaydiso isbeddellada si ay u codsadaan ka dib dib-u-bootinta. Wixii 'iptables' iyo 'firewalld' tan si toos ah ayaa loo sameeyaa, halka 'nftables' waxaad u baahan doontaa inaad gacanta ku kaydiso sharciyada hadda jira fayl lagu dhejin doono bilowga nidaamka.  

Tallaabada 5: Ku xaddid isticmaalayaasha FTP hagaha gudaha

Sida caadiga ah, isticmaalayaasha FTP waxay ka gudbi karaan hagaha gudaha, taas oo noqon karta khatar amni. Si taas looga hortago, ku dar khadka DefaultRoot ~ faylka 'proftpd.conf'. Khadkani waxa uu xadidayaa isticmaalayaasha hagaha gudaha. Ku dar dhammaadka faylka, ka dibna dib u bilow server-ka FTP:  

sudo systemctl restart proftpd.service

Tallaabada 6: abuurista isticmaale cusub ee FTP

Hadda waxaad diyaar u tahay inaad abuurto isticmaale FTP cusub. Uma baahna gelitaanka qolofka taliska, markaa dami sababo ammaan dartood. Waa kuwan amarada taas:  

sudo useradd [username] -d /home/[username] -m -s /usr/sbin/nologin

sudo passwd [username]

Ku beddel [username] isticmaale aad rabto. Amarka 'passwd' ayaa ku siin doona inaad geliso furaha sirta ah isticmaalaha cusub.  

Waxaad hadda dejisay server-ka FTP oo waxaad ku abuurtay isticmaale cusub oo FTP ah server-ka Linux. Had iyo jeer xasuuso amniga markaad dejinayso.