使特定网段用户能自由上传下载
本人系菜鸟一个，前一段突发奇想做了以下的试验，现在问题解决了，把解决的方法总结一下，谨供参考，希望能给像我一样的菜鸟有所帮助。第一次写总结，总有如履薄冰，如临深渊的感觉，生怕误导别人。其中一定会有不妥或是错误，或者如果大家有什么更好的方法，希望大家提出来一起讨论。
解决过程中不少兄弟热情帮助尤其是wolfg斑竹的大力支持，十分感谢。
说明：在FC3上用vsftp实FTP服务。由于一些网段的用户为内部成员，不会对服务器造成危害。为了减少麻烦，更好地实现资源共享，现在想给他们的网段（本例中以10.0.1.*为例）的用户以自由上传下载的权利。
涉及的配置文件一共有四个：
vsftpd.conf
hosts.allow
/etc/vsftpd/local.class
/etc/vsftpd/other.class
内容：
hosts.allow
代码:
#
# hosts.allow This file describes the names of the hosts which are
# allowed to use the local INET services, as decided
# by the '/usr/sbin/tcpd' server.
vsftpd: 10.0.1.* : setenv VSFTPD_LOAD_CONF /etc/vsftpd/local.class
vsftpd: ALL : setenv VSFTPD_LOAD_CONF /etc/vsftpd/other.class
/etc/vsftpd/local.class
代码:
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
/etc/vsftpd/other.class
代码:
write_enable=NO
anon_upload_enable=NO
anon_mkdir_write_enable=NO
vsftpd.conf
代码:
# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
| # READ THIS: This example file is NOT an exhaustive list of vsftpd options. # Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's # capabilities. # # Allow anonymous FTP? (Beware - allowed by default if you comment this out). anonymous_enable=YES # # Uncomment this to allow local users to log in. # 不允许本地用户上传下载,即只允许基于ip的认证 #local_enable=YES # # Uncomment this to enable any form of FTP write command. # 在ftpd中的local.class和other.class文件中有write_enable=YES项 #write_enable=YES # # Default umask for local users is 077. You may wish to change this to 022, # if your users expect that (022 is used by most other ftpd's) local_umask=022 # # Uncomment this to allow the anonymous FTP user to upload files. This only # has an effect if the above global write enable is activated. Also, you will # obviously need to create a directory writable by the FTP user. #anon_upload_enable=YES # # Uncomment this if you want the anonymous FTP user to be able to create # new directories. #anon_mkdir_write_enable=YES # # Activate directory messages - messages given to remote users when they # go into a certain directory. dirmessage_enable=YES # # Activate logging of uploads/downloads. xferlog_enable=YES # # Make sure PORT transfer connections originate from port 20 (ftp-data). connect_from_port_20=YES # # If you want, you can arrange for uploaded anonymous files to be owned by # a different user. Note! Using "root" for uploaded files is not # recommended! #chown_uploads=YES #chown_username=whoever # |
# You may override where the log file goes if you like. The default is shown
最新相关文章发表评论