LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 12-29-2013, 12:28 PM   #1
jokar.mohsen
Member
 
Registered: Jul 2008
Location: Tehran
Posts: 441

Rep: Reputation: 22
Post Public FTP server


Hello Folks.
I want to launch a public FTP server that other users in the world can access to it. I have a dedicated IP address. In your opinion is vsftp secure? In vsftp configure file I see "listen_address=" it should be my dedicated IP address?

Thanks.
 
Old 12-29-2013, 03:33 PM   #2
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,290

Rep: Reputation: 378Reputation: 378Reputation: 378Reputation: 378
I haven't run a public FTP server in ages, but as far as I know, vsftp has a pretty good reputation for security. Just make sure it's configured correctly (i.e. disabling uploads by anonymous users, permissions set correctly, etc.) and follow security errata for the distribution you will be using.

The listen address can be your public IP or just 0.0.0.0, which will tell vsftpd to listen on every interface (including the local loopback).
 
Old 12-30-2013, 12:37 AM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,359

Rep: Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751
Here's the home site: https://security.appspot.com/vsftpd.html.
The 'VS' stands for 'Very Secure', but its still up to you to setup correctly, its not a Strong AI you know
 
Old 12-30-2013, 10:35 AM   #4
yo8rxp
Member
 
Registered: Jul 2009
Location: Romania
Distribution: Ubuntu 10.04 Gnome 2
Posts: 102

Rep: Reputation: 31
Enforce security !

Inded , VS stands for very secure , but some steps are required !
In orded to avoid virusses attacks , change port to a higher one like 20100 , it is harder for nmap to scan it.
Install fail2ban and look over internet for a proper configuration , mine is set to ban offender's ip for 24 hours only for 3 wrong attempts.
You as owner , can login into ftp over ssh like sftp://user@ip_address, of course not using plain passwords but RSA private key.
listen addr should be left as it is , 0.0.0.0 or blank , it means that it is allowed to listen entire range of IPv4 addresses
Sincerely

Last edited by yo8rxp; 12-30-2013 at 10:38 AM.
 
Old 01-01-2014, 10:25 PM   #5
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,359

Rep: Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751
Quote:
, can login into ftp over ssh like sftp://user@ip_address,
sftp != ftp ; you can't login like that. sftp is over the ssh channel.
You could use ftps (ftp+ssl) as supported by vsftpd, but personally I prefer just ssh/scp (& sftp if necessary).
 
Old 01-02-2014, 12:53 AM   #6
yo8rxp
Member
 
Registered: Jul 2009
Location: Romania
Distribution: Ubuntu 10.04 Gnome 2
Posts: 102

Rep: Reputation: 31
true , ftp != sftp. i did not say otherwise !
I just said that can ftp (file transfer protocol ) over ssh
I always use sftp in Nautilus to transfer files towards my main server
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
create a public directory for chroot ftp users pedenski Linux - Newbie 4 05-13-2013 12:31 AM
Trouble with Samba and LDAP on a public ftp LethalPapercut Linux - Server 1 03-19-2013 05:56 AM
to create public ftp server ARsenthil Linux - Newbie 2 01-30-2008 02:23 PM
Do YOU know any public FTP like ibiblio to indicate? Grobsch Linux - Distributions 1 03-04-2005 09:36 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 03:42 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration