Rsa_private_key_file=/etc/ssl/private/vsftpd.pemĦ. Then, add the following lines: rsa_cert_file=/etc/ssl/private/vsftpd.pem Next, open your nf file in an editor and change the line ssl_enable=NO to ssl_enable=YES: ssl_enable=YESĤ. Provide the required information when prompted or keep the default configuration by pressing Enter.ģ. To do so, run the command: sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/private/vsftpd.pemĢ. Start by creating a new certificate with openssl. This will add a layer of secure encryption to your FTP traffic.ġ. This is done by using FTPS – File Transfer Protocol over SSL (Secure Socket Layer).įor this to work, users need to be set up with a shell account on the FTP server. Encrypt Traffic With FTPSĪnother method to secure your FTP server is to encrypt the traffic. To add blocked users, edit this file and add one user per line. Restart the vsftpd service: sudo systemctl restart rviceīy default, the list of blocked users from FTP access is stored in /etc/ftpusers. If you want to let authenticated users upload files, edit the nf file by entering the following: sudo nano /etc/nfįind the entry labeled write_enable=NO, and change the value to “ YES.” Now, you can put any files you want to share via FTP into the /srv/ftp folder (if you left it as the default), or the /srv/ftp/ new_location/ directory (if you changed it). Restart the vsftpd service to apply the changes: sudo systemctl restart rvice Sudo usermod -d /srv/ftp/new_location ftp To change the FTP home directory, enter the following: sudo mkdir /srv/ftp/new_location You can change this by creating a new directory and changing the FTP user home directory. Configuring and Securing Ubuntu vsftpd Server Change Default Directoryīy default, the FTP server uses the /srv/ftp directory as the default directory.
You should now be successfully logged in to your FTP server. Log in using the testuser account and password you just set. Replace ubuntu-ftp with the name of your system (taken from the command line). Step 6: Connect to Ubuntu FTP ServerĬonnect to the FTP server with the following command: sudo ftp ubuntu-ftp These are the listening ports for the FTP service. Note: If you are using a different firewall, refer to the instructions to allow access on Port 20 and Port 21.
0 kommentar(er)
