vsftpd vs ssl

[b]
make vsftpd with ssl support[/b]
[quote]- vsftpd built with OpenSSL support. This is a decision your vsftpd packager
made, or if you are building vsftpd yourself, edit "builddefs.h" and change the
"#undef VSF_BUILD_SSL" to "#define VSF_BUILD_SSL".[/quote]

then add "ssl_enable=YES" in your vsftpd.conf.

[b]create ssl pem[/b]
[quote]
mkdir -p /usr/share/ssl/certs/

openssl req -x509 -nodes -newkey rsa:1024 -keyout \
/usr/share/ssl/certs/vsftpd.pem \
-out /usr/share/ssl/certs/vsftpd.pem

chmod 600 /usr/share/ssl/certs/vsftpd.pem
[/quote]


[b]/etc/sysconfig/iptables:[/b]
[quote]
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -m tcp -p tcp --dport 20 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 65000:65200 -j ACCEPT
[/quote]

虚拟用户：
1、生成一个文本文件vsftpd-login.txt，内容一行是用户名，一行是密码
2、生成db文件db42_load -T -t hash -f vsftpd-login.txt /etc/vsftpd_login.db