{"id":2937,"date":"2018-08-12T14:15:25","date_gmt":"2018-08-12T14:15:25","guid":{"rendered":"https:\/\/tst-amo.net.ua\/blog\/?p=2937"},"modified":"2022-03-28T17:16:33","modified_gmt":"2022-03-28T17:16:33","slug":"proftpd-ftps-sftp-%d0%b8-%d0%b2%d0%b8%d1%80%d1%82%d1%83%d0%b0%d0%bb%d1%8c%d0%bd%d1%8b%d0%b5-%d0%bf%d0%be%d0%bb%d1%8c%d0%b7%d0%be%d0%b2%d0%b0%d1%82%d0%b5%d0%bb%d0%b8","status":"publish","type":"post","link":"https:\/\/tst-amo.net.ua\/blog\/?p=2937","title":{"rendered":"ProFTPd &#8211; FTPs, sFTP \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438"},"content":{"rendered":"<p>\u0417\u0430\u0434\u0430\u0447\u0430 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u0432 \u0441\u0432\u043e\u044e \u0434\u043e\u043c\u0430\u0448\u043d\u044e\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e (\u0442.\u0435. chroot) \u043f\u043e FTP, FTPs \u0438 sFTP.<\/p>\n<pre># yum install proftpd proftpd-utils<\/pre>\n<p>\u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0435\u0433\u043e:<\/p>\n<pre>$ sudo systemctl enable proftpd\r\n$ sudo systemctl start proftpd<\/pre>\n<p>Firewall:<\/p>\n<pre># iptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED --dport 20:21 -j ACCEPT\r\n# iptables -A INPUT -p tcp -m state --state NEW --dport 40900:40999 -j ACCEPT<\/pre>\n<p>\u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433 \/etc\/proftpd.conf \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0442\u0443\u0434\u0430 \u0441\u0442\u0440\u043e\u043a\u0438:<\/p>\n<pre>ServerName \"FTP SERVER\"\r\nServerType standalone\r\nDefaultServer on\r\n\r\nPort 21\r\nUmask 022\r\n\r\nDefaultAddress 192.168.0.1 192.168.1.41\r\nSocketBindTight on\r\nRequireValidShell off\r\nAuthUserFile \/etc\/proftpd.d\/ftpd.passwd\r\nUseIPv6 off\r\nIdentLookups off\r\nPassivePorts 40900 40999\r\n\r\nMaxInstances 30\r\nCommandBufferSize 512\r\n\r\nUser nobody\r\nGroup nobody\r\nLangEngine on\r\nLangPath \/usr\/share\/locale.\r\nUseEncoding UTF-8 WINDOWS-1251\r\n\r\nDefaultRoot ~\r\nAllowOverwrite on\r\n\r\n# Bar use of SITE CHMOD by default\r\n&lt;Limit SITE_CHMOD&gt;\r\n  AllowAll\r\n&lt;\/Limit&gt;\r\n&lt;Directory ~&gt;\r\n  AllowOverwrite on\r\n  AllowStoreRestart on\r\n &lt;Limit Write&gt;\r\n    AllowAll\r\n &lt;\/Limit&gt;\r\n &lt;Limit READ&gt;\r\n    AllowAll\r\n &lt;\/Limit&gt;\r\n&lt;\/Directory&gt;\r\n&lt;Global&gt;\r\n   PassivePorts 40900 40999\r\n   AuthUserFile \/etc\/proftpd.d\/ftpd.passwd\r\n   #RequireValidShell off\r\n   MaxLoginAttempts 6\r\n   LangEngine on\r\n   UseEncoding UTF-8 WINDOWS-1251\r\n   DefaultRoot ~ !admins\r\n   # \u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\r\n   AllowOverwrite on\r\n&lt;\/Global&gt;<\/pre>\n<h4>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f<\/h4>\n<pre># adduser imp -s \/sbin\/nologin -d \/home\/imp<\/pre>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c<\/p>\n<pre># vipw\r\nimp:x:1002:1003::\/home\/imp:\/sbin\/nologin<\/pre>\n<p>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u0433\u0440\u0443\u043f\u043f\u0443<\/p>\n<pre># usermod -aG www-data imp<\/pre>\n<p>\u0421\u043c\u043e\u0442\u0440\u0438\u043c uid\/gid<\/p>\n<pre># id imp\r\nuid=<span style=\"color: #ff0000;\">1002<\/span>(imp) gid=1003(imp) \u0433\u0440\u0443\u043f\u043f\u044b=1003(imp),<span style=\"color: #ff0000;\">1001<\/span>(www-data)<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0443 \u041b\u043e\u0433\u0438\u043d-\u041f\u0430\u0440\u043e\u043b\u044c<\/p>\n<pre># mkdir \/etc\/proftpd.d\/\r\n# ftpasswd --passwd --file=\/etc\/proftpd.d\/ftpd.passwd --name=<span style=\"color: #ff0000;\">imp<\/span> --uid=<span style=\"color: #ff0000;\">1002<\/span> --gid=<span style=\"color: #ff0000;\">1001<\/span> --home=\/home\/imp --shell=\/sbin\/nologin<\/pre>\n<p>\u042d\u0442\u0443 \u0436\u0435 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.<\/p>\n<p>\u0421\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043c\u043e\u0436\u043d\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439<\/p>\n<pre># ftpasswd --passwd --file=\/etc\/proftpd.d\/ftpd.passwd --name=<span style=\"color: #ff0000;\">imp<\/span> --change-password<\/pre>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e<\/p>\n<pre># proftpd -t\r\n# proftpd -s reload<\/pre>\n<h4>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 ProFTPD \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 TLS\/SSL \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430<\/h4>\n<pre># mkdir \/etc\/proftpd.d\/ssl\/\r\n\r\n# openssl req -x509 -days <span style=\"color: #ff0000;\">3650<\/span> -nodes -newkey rsa:1024 -keyout \/etc\/proftpd.d\/ssl\/proftpd.key -out \/etc\/proftpd.d\/ssl\/proftpd.crt\r\nCountry Name (2 letter code) [XX]:<span style=\"color: #ff0000;\">UA<\/span>\r\nState or Province Name (full name) []:<span style=\"color: #ff0000;\">Kiev<\/span>\r\nLocality Name (eg, city) [Default City]:<span style=\"color: #ff0000;\">Kiev<\/span>\r\nOrganization Name (eg, company) [Default Company Ltd]:<span style=\"color: #ff0000;\">OfficeLTD<\/span>\r\nOrganizational Unit Name (eg, section) []:<span style=\"color: #ff0000;\">IT<\/span>\r\nCommon Name (eg, your name or your server's hostname) []:<span style=\"color: #ff0000;\">ftp.domen.com<\/span>\r\nEmail Address []:<span style=\"color: #ff0000;\">postmaster@domen.com<\/span>\r\n\r\n# chmod 600 \/etc\/proftpd.d\/ssl\/proftpd.key<\/pre>\n<p>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 proftpd.conf<\/p>\n<pre># nano \/etc\/proftpd.conf\r\n\r\n#LoadModule mod_tls.c.\r\n&lt;VirtualHost <span style=\"color: #ff0000;\">192.168.1.41<\/span>&gt;\r\n  MasqueradeAddress <span style=\"color: #ff0000;\">ftp.domen.com<\/span>\r\n  TLSEngine <span style=\"color: #ff0000;\">on<\/span>\r\n  Port <span style=\"color: #ff0000;\">1021<\/span>\r\n  TLSLog \/var\/log\/proftpd\/tls.log\r\n  TLSProtocol SSLv23\r\n  TLSRequired auth\r\n  #TLSOptions NoCertRequest\r\n  TLSRSACertificateFile \/etc\/proftpd.d\/ssl\/<span style=\"color: #ff0000;\">proftpd.crt<\/span>\r\n  TLSRSACertificateKeyFile \/etc\/proftpd.d\/ssl\/<span style=\"color: #ff0000;\">proftpd.key<\/span>\r\n  TLSVerifyClient off\r\n&lt;\/VirtualHost&gt;<\/pre>\n<p>\u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u043f\u043e\u0440\u0442 1021 \u0432 iptables:<\/p>\n<pre># iptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED --dport 1021 -j ACCEPT\r\n# iptables -A INPUT -p tcp -m state --state NEW --dport 40900:40999 -j ACCEPT<\/pre>\n<p>\u041f\u0440\u043e\u0431\u0443\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c FileZila \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-2944 size-full\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2018\/08\/proftpd_1-1.jpg\" alt=\"\" width=\"659\" height=\"503\" srcset=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2018\/08\/proftpd_1-1.jpg 659w, https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2018\/08\/proftpd_1-1-300x229.jpg 300w\" sizes=\"(max-width: 659px) 100vw, 659px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h4>\u0414\u043e\u0441\u0442\u0443\u043f \u043f\u043e sFTP<\/h4>\n<p>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \/etc\/proftpd.conf \u043f\u043e\u0441\u043b\u0435 \u0441\u0435\u043a\u0446\u0438\u0438 &lt;Global&gt;&lt;\/Global&gt;<\/p>\n<pre>LoadModule mod_sftp.c\r\n&lt;VirtualHost <span style=\"color: #ff0000;\">192.168.1.41<\/span>&gt;\r\n  MasqueradeAddress <span style=\"color: #ff0000;\">ftp.domen.com<\/span>\r\n  SFTPEngine <span style=\"color: #ff0000;\">on<\/span>\r\n  Port <span style=\"color: #ff0000;\">8022<\/span>\r\n  #SFTPHostKey \/etc\/ssh\/ssh_host_ed25519_key\r\n  SFTPHostKey \/etc\/ssh\/ssh_host_rsa_key\r\n  SFTPHostKey \/etc\/ssh\/ssh_host_ecdsa_key\r\n  SFTPLog \/var\/log\/proftpd\/sftp.log\r\n  SFTPCompression off\r\n&lt;\/VirtualHost&gt;<\/pre>\n<p>\u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u043f\u043e\u0440\u0442 8022 (\u0438\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u043d\u0435\u0437\u0430\u043d\u044f\u0442\u044b\u0439, \u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0448\u0435 1024)<\/p>\n<pre># iptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED --dport 8022 -j ACCEPT<\/pre>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0442\u0430\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e<\/p>\n<pre># proftpd -t\r\n# proftpd -s reload<\/pre>\n<p>\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430:<\/p>\n<pre>proftpd[15477]: fatal: SFTPHostKey: unable to use '\/etc\/ssh\/ssh_host_rsa_key' as host key, as it is group- or world-accessible on line 78 of '\/etc\/proftpd.conf'<\/pre>\n<p>\u041c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430<\/p>\n<pre># chmod 600 \/etc\/ssh\/ssh_host_rsa_key<\/pre>\n<p>\u0418 \u0434\u043b\u044f \u043a\u043b\u044e\u0447\u0430 \u044e\u0437\u0435\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c (\u043d\u0435 \u0443\u0432\u0435\u0440\u0435\u043d):<\/p>\n<pre># ssh-keygen -f \/etc\/ssh\/ssh_host_dsa_key -N '' -t dsa<\/pre>\n<p>\u041f\u0440\u043e\u0431\u0443\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-2943 size-full\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2018\/08\/proftpd_2.jpg\" alt=\"\" width=\"658\" height=\"503\" srcset=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2018\/08\/proftpd_2.jpg 658w, https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2018\/08\/proftpd_2-300x229.jpg 300w\" sizes=\"(max-width: 658px) 100vw, 658px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h4>\u041f\u0430\u0441\u0438\u0432\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c \u0438 iptables<\/h4>\n<p>\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044c ip_conntrack_ftp \u0434\u043b\u044f iptables. \u0412 RedHat\/CentOS \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432 \u0444\u0430\u0439\u043b \/etc\/sysconfig\/iptables-config \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043c\u043e\u0434\u0443\u043b\u044f ip_conntrack_ftp:<\/p>\n<pre># nano \/etc\/sysconfig\/iptables-config\r\nIPTABLES_MODULES=\"ip_conntrack_ftp\"<\/pre>\n<p>\u0414\u043e\u0431\u0430\u0432\u0438\u0442\u044c:<\/p>\n<pre>#nano \/etc\/sysconfig\/proftpd\r\nPROFTPD_OPTIONS=\"-DTLS\"<\/pre>\n<p>nano iptables (\u0443 \u043c\u0435\u043d\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 NAT):<\/p>\n<pre># Load needed modules\r\n<span style=\"color: #ff0000;\">modprobe ip_conntrack_ftp<\/span>\r\nmodprobe ip_nat_ftp\r\n....\r\n# FTP, sFTP, FTPs\r\niptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED --dport 20:21 -j ACCEPT\r\niptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED --dport 8022 -j ACCEPT\r\niptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED --dport 1021 -j ACCEPT\r\niptables -A INPUT -p tcp -m state --state NEW --dport 40900:40999 -j ACCEPT\r\n....<\/pre>\n<h4>\u041b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435<\/h4>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0444\u0430\u0439\u043b\u044b:<\/p>\n<pre># touch \/var\/log\/proftpd\/{proftpd,xfer,access,auth}.log<\/pre>\n<p>\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 ftp:<\/p>\n<pre># cat \/etc\/proftpd.conf\r\n....\r\nSystemLog \/var\/log\/proftpd\/proftpd.log\r\nTransferLog \/var\/log\/proftpd\/xfer.log\r\nExtendedLog \/var\/log\/proftpd\/access.log WRITE,READ write\r\nExtendedLog \/var\/log\/proftpd\/auth.log AUTH auth\r\nDebugLevel 9\r\n.....<\/pre>\n<h4>\u041e\u0442\u043b\u0430\u0434\u043a\u0430<\/h4>\n<p>\u0415\u0441\u0442\u044c \u0448\u0438\u043a\u0430\u0440\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0442\u043b\u0430\u0434\u043a\u0438. \u041f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0435\u0433\u043e, \u043d\u0443\u0436\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441:<\/p>\n<pre># service proftpd stop<\/pre>\n<p>\u0420\u0435\u0436\u0438\u043c DEBUG\u0430 (-d &#8211; \u0432\u044b\u0431\u043e\u0440 \u0443\u0440\u043e\u0432\u043d\u044f \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f)<\/p>\n<pre># proftpd -n -d 9 -c \/etc\/proftpd.conf<\/pre>\n<h4>\u0417\u0430\u0449\u0438\u0442\u0430<\/h4>\n<p>\u0414\u043e\u0431\u0430\u0432\u0438\u043c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432 fail2ban. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043a\u043b\u0435\u0442\u043a\u0443 \u0438 \u043f\u0440\u0430\u0432\u0438\u043c \u0444\u0438\u043b\u044c\u0442\u0440:<\/p>\n<pre>cat \/etc\/fail2ban\/jail.d\/proftpd.conf\r\n[proftpd]\r\nenabled = true\r\nfilter = proftpd\r\nlogpath = \/var\/log\/proftpd\/proftpd.log\r\nmaxretry = 3\r\nignoreip = 127.0.0.1\/8 192.168.0.0\/24\r\n#backend = polling\r\nport = ftp,ftp-data,ftps,ftps-data\r\n#logpath = %(proftpd_log)s\r\n#backend = %(proftpd_backend)s\r\nbackend = gamin<\/pre>\n<pre>cat \/etc\/fail2ban\/filter.d\/proftpd.conf\r\n[Definition]\r\nfailregex = USER \\S+: no such user found from \\S* ?\\[&lt;HOST&gt;\\] to \\S+\\s*$\r\nignoreregex =<\/pre>\n<p>\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c:<\/p>\n<pre># service proftpd restart\r\n# service fail2ban restart\r\n# fail2ban-client status proftpd<\/pre>\n<h4>\u0418\u0442\u043e\u0433<\/h4>\n<p>\u041c\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438 FTP \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e FTP, sFTP, FTPs, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0435\u0442 \u0432\u044b\u0448\u0435 \u0441\u0432\u043e\u0435\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.<\/p>\n<h4>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438<\/h4>\n<p><a href=\"https:\/\/www.dmosk.ru\/instruktions.php?object=proftpd-centos7\">https:\/\/www.dmosk.ru\/instruktions.php?object=proftpd-centos7<\/a><br \/>\n<a href=\"https:\/\/sys-adm.in\/os\/nix\/539-centod-install-proftpd.html\">https:\/\/sys-adm.in\/os\/nix\/539-centod-install-proftpd.html<\/a><br \/>\n<a href=\"http:\/\/unixblog.org.ua\/proftpd\/install-proftpd-centos-7-auth-via-authuserfile\/\">http:\/\/unixblog.org.ua\/proftpd\/install-proftpd-centos-7-auth-via-authuserfile\/<\/a><\/p>\n<p>Iptables \u0438 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c FTP<br \/>\n<a href=\"https:\/\/www.homeless.su\/linux-tipstricks\/iptables-i-passivnyj-rezhim-ftp\/\">https:\/\/www.homeless.su\/linux-tipstricks\/iptables-i-passivnyj-rezhim-ftp\/<\/a><\/p>\n<p>Log<br \/>\n<a href=\"https:\/\/sys-adm.in\/os\/nix\/496-loggining-proftpd-in-centos.html\">https:\/\/sys-adm.in\/os\/nix\/496-loggining-proftpd-in-centos.html<\/a><\/p>\n<div class=\"pdfprnt-buttons pdfprnt-buttons-post pdfprnt-bottom-right\"><a href=\"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=wpv2posts2937&print=pdf\" class=\"pdfprnt-button pdfprnt-button-pdf\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/plugins\/pdf-print\/images\/pdf.png\" alt=\"image_pdf\" title=\"View PDF\" \/><\/a><a href=\"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=wpv2posts2937&print=print\" class=\"pdfprnt-button pdfprnt-button-print\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/plugins\/pdf-print\/images\/print.png\" alt=\"image_print\" title=\"Print Content\" \/><\/a><\/div>","protected":false},"excerpt":{"rendered":"<p>\u0417\u0430\u0434\u0430\u0447\u0430 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u0432 \u0441\u0432\u043e\u044e \u0434\u043e\u043c\u0430\u0448\u043d\u044e\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e (\u0442.\u0435. chroot) \u043f\u043e FTP, FTPs \u0438 sFTP. # yum install proftpd proftpd-utils \u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0435\u0433\u043e: $ sudo systemctl enable proftpd $ sudo systemctl start proftpd Firewall: # iptables -A INPUT -p tcp -m state &#8211;state NEW,ESTABLISHED &#8211;dport 20:21 -j ACCEPT # iptables -A &#8230;<\/p>\n<p><a href=\"https:\/\/tst-amo.net.ua\/blog\/?p=2937\" class=\"more-link\">Continue reading &lsquo;ProFTPd &#8211; FTPs, sFTP \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438&rsquo; &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[143,145,47,144,146],"tags":[],"class_list":["post-2937","post","type-post","status-publish","format-standard","hentry","category-ftp","category-ftps","category-linux","category-proftpd","category-sftp"],"_links":{"self":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2937"}],"collection":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2937"}],"version-history":[{"count":11,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2937\/revisions"}],"predecessor-version":[{"id":5035,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2937\/revisions\/5035"}],"wp:attachment":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}