linux vsftpÎÊÌ⣬´ó¼Ò½øÀ´°ï°ïæ лл

ÎÊÌâÊÇÕâÑùµÄ£¬ÎÒÕâÑùÅäÖÃiptablesµÄ
iptables -F
iptables -X
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 21 -j ACCEPT
iptables -A INPUT -p tcp --dport 20 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 20 -j ACCEPT
ÕâÑùÅäÖÃÓдíÂð£¿ÎªÊ²Ã´ftpµ½µÇ½¿ò ÊäÈëÕ˺ÅÃÜÂëÒÔºó ¾Í²»ÐÐÁË ½ø²»ÁËftp ÊDz»ÊÇ»¹ÐèÒªÆäËûʲô¶Ë¿Ú£¬¹Øµô·À»ðǽÊÇ¿ÉÒԵĠ »¹ÓоÍÊǼÙÈç¹Øµô·À»ðǽ ÔÚÖØпªÆô  iptablesµÄÅäÖûỹԭ³É³õװ״̬µÄ  Ϊʲô¡£Ð»Ð»´ó¼Ò

---

¶¼È¥³Ô·¹ÁËÂð  ÔõôûÓÐÈËÀ´°ï°ïÎÒ°¡

---

ÉèÖÃvsftpÓÃPORT FTPģʽ, ÕâÑù¾Í»á¹Ì¶¨µÄÊý¾ÝÁ¬½Ó20¶Ë¿Ú, ·ñÔòPASV FTPģʽ»áËæ»ú¶Ë¿Ú¸ú¿Í»§¶Ë´«Êý¾Ý(¶Ë¿ÚÓÉ¿Í»§¶ËÖ¸¶¨)

---

¶àл¥ÉϵÄÖ¸µ¼£¬²»¹ýÄÜ·ñÏêϸµãµÄ˵  ÎÒÊÇÐÂÊÖ Ð»Ð»

---

http://vsftpd.beasts.org/vsftpd_conf.html

refer to the following configuration options.

HTML code:

pasv_enable
Set to NO if you want to disallow the PASV method of obtaining a data connection.
Default: YES

pasv_promiscuous
Set to YES if you want to disable the PASV security check that ensures the data connection originates from the same IP address as the control connection. Only enable if you know what you are doing! The only legitimate use for this is in some form of secure tu