Debian FTP Server 远程管理实操指南
一 架构与方案选择
二 安装与基础配置
sudo apt update && sudo apt install vsftpdlocal_enable=YESwrite_enable=YESchroot_local_user=YESallow_writeable_chroot=YESuserlist_enable=YESuserlist_file=/etc/vsftpd.userlistuserlist_deny=NOxferlog_enable=YESxferlog_std_format=YESsudo adduser ftpadminsudo chown ftpadmin:ftpadmin /home/ftpadmin && sudo chmod 755 /home/ftpadminsudo systemctl restart vsftpd && sudo systemctl enable vsftpd三 远程访问与安全加固
sudo ufw allow 21/tcp、sudo ufw allow 20/tcp、sudo ufw allow 50000:50100/tcpsudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/certs/vsftpd.pemssl_enable=YESallow_anon_ssl=NOforce_local_data_ssl=YESforce_local_logins_ssl=YESssl_tlsv1=NO、ssl_sslv2=NO、ssl_sslv3=NOrsa_cert_file=/etc/ssl/certs/vsftpd.pemrsa_private_key_file=/etc/ssl/private/vsftpd.pemsudo apt install openssh-server四 客户端连接与验证
sudo tail -f /var/log/vsftpd.logtelnet 服务器IP 50000(示例端口)应可连通;若不通,检查云安全组/防火墙与 vsftpd 的 pasv_min_port/pasv_max_port 设置。五 运维与自动化管理
sudo systemctl start|stop|restart|status vsftpdsudo systemctl enable vsftpd