VERY SECURE TRANSFER PROTOCOL DAEMON(VSFTPD) IN REDHAT LINUX

VERY SECURE TRANSFER PROTOCOL DAEMON(VSFTPD)

Features:

1. FTPD

2. Chroot jail

3. anonymous and local-user auth

4. Rate-limiting

Tasks:

1. Install 'vsftpd'

•yum -y install vsftpd

2. Start the server

•service vsftpd start
•b. netstat -ntlp | grep 21

3. Configure service to start when system boots into multi-user runlevel
•chkconfig vsftpd on
•b. chkconfig --list vsftpd

4. Connect to the FTPD service:

•Use web browser, which defaults to anonymous
•Use standard FTP client, as anonymous
•setsebool -P ftp_home_dir=1 - permits users access to their home directory
•service vsftpd restart - for changes to take effect

5. Chroot jail local users & disable 'anonymous' access

•chroot_local_user=YES - this jails users
•service vsftpd restart - for changes to take effect
•test connectivity as 'anonymous' and 'non-anonymous' users

6. Enable IPv6 listener:

•listen_ipv6=YES - DO NOT USE WITH 'listen=YES(IPv4)'

7. Restrict 'non-anonymous' user's transfer rate

•local_max_rate=1000 - restricts connections to 1000/bps (1K/s)