vsftp

    #! /bin/bash
    echo "开始安装vsftp"
    yum -y install vsftpd
    chkconfig vsftpd on

    yum install ftp telnet -y

    echo "开始配置vsftp"
    cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf_bak
    sed -i  "s/^anonymous_enable=YES/anonymous_enable=NO/g"  /etc/vsftpd/vsftpd.conf
    sed -i  "s/^#chroot_list_enable=YES/chroot_list_enable=YES/g"  /etc/vsftpd/vsftpd.conf
    sed -i  "s/^#ascii_upload_enable=YES/ascii_upload_enable=YES/g"  /etc/vsftpd/vsftpd.conf
    sed -i  "s/^#ascii_download_enable=YES/ascii_download_enable=YES/g"  /etc/vsftpd/vsftpd.conf
    sed -i  "s/^#chroot_list_file=\/etc\/vsftpd\/chroot_list/chroot_list_file=\/etc\/vsftpd\/vuser_passwd.txt/g"  /etc/vsftpd/vsftpd.conf

    echo "guest_enable=YES" >> /etc/vsftpd/vsftpd.conf
    echo "guest_username=ftp" >> /etc/vsftpd/vsftpd.conf
    echo "user_config_dir=/etc/vsftpd/vuser_conf" >> /etc/vsftpd/vsftpd.conf

    yum install db4 db4-utils

    echo "test" > /etc/vsftpd/vuser_passwd.txt
    echo "123456" >> /etc/vsftpd/vuser_passwd.txt

    db_load -T -t hash -f /etc/vsftpd/vuser_passwd.txt /etc/vsftpd/vuser_passwd.db


    mv /etc/pam.d/vsftpd /etc/pam.d/vsftpd_bak
    echo "auth required pam_userdb.so db=/etc/vsftpd/vuser_passwd" > /etc/pam.d/vsftpd
    echo "account required pam_userdb.so db=/etc/vsftpd/vuser_passwd" >> /etc/pam.d/vsftpd

    mkdir /etc/vsftpd/vuser_conf/

    echo "local_root=/ftp/www" > /etc/vsftpd/vuser_conf/test
    echo "write_enable=YES" >> /etc/vsftpd/vuser_conf/test
    echo "anon_umask=022" >> /etc/vsftpd/vuser_conf/test
    echo "anon_world_readable_only=NO" >> /etc/vsftpd/vuser_conf/test
    echo "anon_upload_enable=YES" >> /etc/vsftpd/vuser_conf/test
    echo "anon_mkdir_write_enable=YES" >> /etc/vsftpd/vuser_conf/test
    echo "anon_other_write_enable=YES" >> /etc/vsftpd/vuser_conf/test

    setsebool -P ftp_home_dir=1
    setsebool -P allow_ftpd_full_access=1

    mkdir -p /ftp/www
    chmod -R 755 /ftp
    chmod -R 777 /ftp/www


    iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
    iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 40000:40080 -j ACCEPT

    iptables-save > /etc/sysconfig/iptables

    echo "应用iptables策略"
    service iptables restart
    echo "启动FTP服务"
    service vsftpd restart