LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Public FTP server (https://www.linuxquestions.org/questions/linux-server-73/public-ftp-server-4175489484/)

jokar.mohsen 12-29-2013 12:28 PM

Public FTP server
 
Hello Folks.
I want to launch a public FTP server that other users in the world can access to it. I have a dedicated IP address. In your opinion is vsftp secure? In vsftp configure file I see "listen_address=" it should be my dedicated IP address?

Thanks.

btmiller 12-29-2013 03:33 PM

I haven't run a public FTP server in ages, but as far as I know, vsftp has a pretty good reputation for security. Just make sure it's configured correctly (i.e. disabling uploads by anonymous users, permissions set correctly, etc.) and follow security errata for the distribution you will be using.

The listen address can be your public IP or just 0.0.0.0, which will tell vsftpd to listen on every interface (including the local loopback).

chrism01 12-30-2013 12:37 AM

Here's the home site: https://security.appspot.com/vsftpd.html.
The 'VS' stands for 'Very Secure', but its still up to you to setup correctly, its not a Strong AI you know ;)

yo8rxp 12-30-2013 10:35 AM

Enforce security !
 
Inded , VS stands for very secure , but some steps are required !
In orded to avoid virusses attacks , change port to a higher one like 20100 , it is harder for nmap to scan it.
Install fail2ban and look over internet for a proper configuration , mine is set to ban offender's ip for 24 hours only for 3 wrong attempts.
You as owner , can login into ftp over ssh like sftp://user@ip_address, of course not using plain passwords but RSA private key.
listen addr should be left as it is , 0.0.0.0 or blank , it means that it is allowed to listen entire range of IPv4 addresses
Sincerely

chrism01 01-01-2014 10:25 PM

Quote:

, can login into ftp over ssh like sftp://user@ip_address,
sftp != ftp ; you can't login like that. sftp is over the ssh channel.
You could use ftps (ftp+ssl) as supported by vsftpd, but personally I prefer just ssh/scp (& sftp if necessary).

yo8rxp 01-02-2014 12:53 AM

true , ftp != sftp. i did not say otherwise !
I just said that can ftp (file transfer protocol ) over ssh
I always use sftp in Nautilus to transfer files towards my main server


All times are GMT -5. The time now is 07:32 PM.