CentOS - FTP server

1. install vsftpd.(PS:procedure 1-4 under the circumstance that the firewall is closed and the iptables is inactive)

 # install vsftpd
 sudo yum install vsftpd
 # start vsftpd
 sudo systemctl start vsftpd.service
 # start automatic after rebooting

2.configurations about vsftpd.

 sudo vim /etc/vsftpd/vsftpd.conf

 ###The following key-values is specially listed####
 anonymous_enable=NO
 dirmessage_enable=YES
 local_umask=
 xferlog_enable=YES
 ftpd_banner="welcome messages"
 data_connection_timeout=

 # restart vsftpd service
 sudo systemctl restart vsftpd.service

3.create ftp user

 sudo useradd -s /sbin/nologin netlab
 sudo passwd netlab
 sudo chmod -R  /home/netlab

4.limit the user to the root directory

# revise the configuration of vsftpd
sudo vim /etc/vsftpd/vsftpd.conf

#####Special items###########
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list
allow_writeable_chroot=YES

# create a file. Otherwise, it would be wrong.
sudo touch /etc/vsftpd/chroot_list

# restart the service
sudo systemctl restart vsftpd.service

5.about the firewall

open the port to allow the application to use the port.

e.g.,

-A INPUT -m state –state NEW -m tcp -p tcp –dport 21 -j ACCEPT