配置 ProFTPD （超全）
寫下自己在配置 Proftpd的一些相關(guān)東西，希望能夠和大家分享：
配置 ProFTPD
然后，通過修改相應(yīng)配置文件配置ProFTPD。
[root@sample ~]# vi /etc/proftpd.conf ← 修改ProFTPD的配置文件
ServerType standalone ← 找到這一行，在行首添加“#”
↓
#ServerType standalone ← 變?yōu)榇藸顟B(tài)，不使用常駐模式
#ServerType inetd ← 找到這一行，去掉行首的“#”
↓
ServerType inetd ← 變?yōu)榇藸顟B(tài)，通過超級(jí)服務(wù)器來啟動(dòng)ProFTPD
DefaultRoot ~ !adm ← 找到這一行，將“ !adm”改為“/public_html !wheel”
↓
DefaultRoot ~/public_html !wheel ← 變?yōu)榇藸顟B(tài)，使除wheel組用戶的根目錄為public_html
找到TLS設(shè)置的語句群，如下：
# TLS
# Explained at http://www.castaglia.org/proftpd/modules/mod_tls.html
----------------------------------------------------------------
#TLSEngine on
#TLSRequired on
#TLSRSACertificateFile /usr/share/ssl/certs/proftpd.pem
#TLSRSACertificateKeyFile /usr/share/ssl/certs/proftpd.pem
#TLSCipherSuite ALL:!ADH:!DES
#TLSOptions NoCertRequest
#TLSVerifyClient off
##TLSRenegotiate ctrl 3600 data 512000 required off timeout 300
#TLSLog /var/log/proftpd/tls.log
----------------------------------------------------------------
↓將以上水平線間部分的語句，每行行首的“#”都去掉，變?yōu)橄旅嫠骄€間的狀態(tài)：
----------------------------------------------------------------
TLSEngine on
TLSRequired on ← 只允許TLS方式的連接(如果將on改為off，普通方式也被允許)
TLSRSACertificateFile /usr/share/ssl/certs/proftpd.pem
TLSRSACertificateKeyFile /usr/share/ssl/certs/proftpd.pem
TLSCipherSuite ALL:!ADH:!DES
TLSOptions NoCertRequest
TLSVerifyClient off
#TLSRenegotiate ctrl 3600 data 512000 required off timeout 300
TLSLog /var/log/proftpd/tls.log
----------------------------------------------------------------
然后在配置文件的末尾填如下幾行：
ExtendedLog /var/log/proftpd/access.log WRITE,READ default ← 記錄連接日志到相應(yīng)日志文件
ExtendedLog /var/log/proftpd/auth.log AUTH auth ← 記錄認(rèn)證日志到相應(yīng)日志文件
MasqueradeAddress digeast.no-ip.info ← 定義服務(wù)器域名
PassivePorts 50000 50030 ← 為PASV模式連接時(shí)指定端口號(hào)(1024以后存在的任意端口號(hào))
然后，為服務(wù)器建立證書。
[root@sample ~]# cd /usr/share/ssl/certs ← 進(jìn)入相應(yīng)的目錄
[root@sample certs]# make proftpd.pem ← 建立服務(wù)器證書
umask 77 ; \
PEM1=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
PEM2=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
/usr/bin/openssl req -newkey rsa:1024 -keyout $PEM1 -nodes -x509 -days 365 -out $PEM2 ; \
cat $PEM1 > proftpd.pem ; \
echo "" >> proftpd.pem ; \
cat $PEM2 >> proftpd.pem ; \
rm -f $PEM1 $PEM2
Generating a 1024 bit RSA private key
.........++++++
............++++++
writing new private key to '/tmp/openssl.sG3126'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:CN ← 輸入國家簡寫
State or Province Name (full name) [Berkshire]:Hei Long Jiang ← 輸入省份
Locality Name (eg, city) [Newbury]:Harbin ← 輸入城市
Organization Name (eg, company) [My Company Ltd]:www.centospub.com ← 輸入組織名(任意)
Organizational Unit Name (eg, section) []: ← 直接回車跳過
Common Name (eg, your name or your server's hostname) []:www.centospub.com ← FTP服務(wù)器名反饋
Email Address []:yourname@yourserver.com ← 輸入E-mail地址
通過文章的詳細(xì)的說明，我相信大家都知道如何配置自己的ProFTPD，希望對你們有所幫助！
【編輯推薦】
