FTP Summary

kloudways spots:

• FTP stand for File Transfer Protocol.
• FTP does not require to login directly into the remote host
• FTP transfer data without encryption
• vsftpd is the only stand-alone FTP distributed With RHEL 6
• vsftpd stand for Very Secure FTP Daemon
• vsftpd is secure, fast and stable version of FTP
• vsftpd efficiently handle large numbers of connection securely
• You should use SFTP instead of FTP while transferring data over public network like Internet

FTP Server Options (/etc/vsftpd/vsftpd.conf):

• anonymous_enable
  • When enabled, anonymous users are allowed to log in.
  • The usernames anonymous and ftp are accepted.
  • The default value is YES.
• cmds_allowed 
  • Specifies a comma-delimited list of FTP commands allowed by the server. All other commands are rejected.
  • There is no default value for this directive.
• ftpd_banner 
  • When enabled, the string specified within this directive is displayed when a connection is established to the server. This option can be overridden by thebanner_file directive.
  • By default vsftpd displays its standard banner.
• local_enable
  • When enabled, local users are allowed to log into the system.
  • The default value is NO.
• userlist_deny 
  • When used in conjunction with the userlist_enable directive and set to NO, all local users are denied access unless the username is listed in the file specified by the userlist_file directive. Because access is denied before the client is asked for a password, setting this directive to NO prevents local users from submitting unencrypted passwords over the network.
  • The default value is YES.
• userlist_enable
  • When enabled, the users listed in the file specified by the userlist_file directive are denied access. Because access is denied before the client is asked for a password, users are prevented from submitting unencrypted passwords over the network.
  • The default value is NO, however under Red Hat Enterprise Linux the value is set to YES.
• userlist_file
  • Specifies the file referenced by vsftpd when the userlist_enable directive is enabled.
  • The default value is /etc/vsftpd/user_list.
• anon_mkdir_write_enable
  • When enabled in conjunction with the write_enable directive, anonymous users are allowed to create new directories within a parent directory which has write permissions.
  • The default value is NO.
• anon_root 
  • Specifies the directory vsftpd changes to after an anonymous user logs in.
  • There is no default value for this directive.
• anon_upload_enable 
  • When enabled in conjunction with the write_enable directive, anonymous users are allowed to upload files within a parent directory which has write permissions.
  • The default value is NO.
• anon_world_readable_only 
  • When enabled, anonymous users are only allowed to download world-readable files.
  • The default value is YES.
• ftp_username 
  • Specifies the local user account (listed in /etc/passwd) used for the anonymous FTP user. The home directory specified in /etc/passwd for the user is the root directory of the anonymous FTP user.
  • The default value is ftp.
• no_anon_password
  • When enabled, the anonymous user is not asked for a password.
  • The default value is NO.
• chmod_enable
  • When enabled, the FTP command SITE CHMOD is allowed for local users. This command allows the users to change the permissions on files.
  • The default value is YES.
• chroot_list_enable 
  • When enabled, the local users listed in the file specified in the chroot_list_file directive are placed in a chroot jail upon log in.
  • If enabled in conjunction with the chroot_local_user directive, the local users listed in the file specified in the chroot_list_file directive are not placed in a chroot jail upon log in.
  • The default value is NO.
• chroot_list_file 
  • Specifies the file containing a list of local users referenced when the chroot_list_enable directive is set to YES.
  • The default value is /etc/vsftpd.chroot_list.
• chroot_local_user 
  • When enabled, local users are change-rooted to their home directories after logging in.
  • The default value is NO.

FTP Client Options: