HOWTO : Create a FTP(proftpd) server

A- The GUI way (for beginners only) (没用过)
1- Install proftpd and gproftpd with synaptic or with this command :
sudo apt-get install proftpd gproftpd
B- The secure way
(不选standalone， netstat -ntl 时看不到 21号端口，不解)
1- Install proftpd with synaptic or with this command :

Code: sudo apt-get install proftpd 2- Add this line in /etc/shells file (sudo gedit /etc/shells to open the file) :

Code: /bin/false  Create a /home/FTP-shared directory :

Code: cd /home
sudo mkdir FTP-shared


Code: sudo useradd userftp -p your_password -d /home/FTP-shared -s /bin/false
sudo passwd userftp  In FTP-shared directory create a download and an upload directory :

Code: cd /home/FTP-shared/
sudo mkdir download
sudo mkdir upload Now we have to set the good permissions for these directories :

Code: cd /home
sudo chmod 755 FTP-shared
cd FTP-shared
sudo chmod 755 download
sudo chmod 777 upload 3- OK, now go to the proftpd configuration file :  

Code: sudo gedit /etc/proftpd/proftpd.conf
and edit your proftpd.conf file like that if it fit to your need :


Code: # To really apply changes reload proftpd after modifications.
AllowOverwrite on
AuthAliasOnly on
# Choose here the user alias you want !!!!
UserAlias sauron userftp
ServerName"ChezFrodon"
ServerType standalone
DeferWelcomeon
MultilineRFC2228 on
DefaultServeron
ShowSymlinksoff
TimeoutNoTransfer 600
TimeoutStalled 100
TimeoutIdle 2200
DisplayFirstChdir               .message
ListOptions                "-l"
RequireValidShell off
TimeoutLogin 20
RootLogin off
# It's better for debug to create log files ;-)
ExtendedLog /var/log/ftp.log
TransferLog /var/log/xferlog
SystemLog/var/log/syslog.log
#DenyFilter\*.*/
# I don't choose to use /etc/ftpusers file (set inside the users you want to ban, not useful for me)
UseFtpUsers off
# Allow to restart a download
AllowStoreRestarton
# Port 21 is the standard FTP port, so you may prefer to use another port for security reasons (choose here the port you want)
Port1980
# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 8
# Set the user and group that the server normally runs at.
User                  nobody
Group                 nogroup
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask022022
PersistentPasswdoff
MaxClients 8
MaxClientsPerHost 8
MaxClientsPerUser 8
MaxHostsPerUser 8
# Display a message after a successful login
AccessGrantMsg "welcome !!!"
# This message is displayed for each access good or not
ServerIdent                  on       "you're at home"
# Set /home/FTP-shared directory as home directory
DefaultRoot /home/FTP-shared
# Lock all the users in home directory, ***** really important *****
DefaultRoot ~
MaxLoginAttempts    5
#VALID LOGINS

AllowUser userftp
DenyALL


Umask 022 022
AllowOverwrite off

DenyAll



Umask 022 022
AllowOverwrite off

DenyAll



Umask 022 022
AllowOverwrite on

      DenyAll
   
   
      AllowAll
   
Ok you have done proftpd configuration. Your server is on port 1980 (in this exemple) and the access parameters are
user : sauron
password : the one you've set for userftp
4- To start/stop/restart your server :

Code: sudo /etc/init.d/proftpd start
sudo /etc/init.d/proftpd stop
sudo /etc/init.d/proftpd restart To perform a syntax check of your proftpd.conf file :

Code: sudo proftpd -td5 To know who is connected on your server in realtime use "ftptop" command (use "t" caracter to swich to rate display), you can also use the "ftpwho" command.
other informations here