Pure-FTPD + pureadmin (Ftp server with gui)
Install ''Pure-FTPD'' with GUI
Install the pure-ftpd package and the pureadmin package from the Universe Repository.
sudo apt-get install pure-ftpd pureadmin
Then create the user group.
sudo groupadd ftpgroup
and
sudo useradd -g ftpgroup -d /dev/null -s /etc ftpuser
in the terminal.
Next create your ftpuser directory
sudo mkdir /home/ftpusers
Then to create a user directory for joe
sudo mkdir /home/ftpusers/joe
(you can create a directory for each ftp user)
Then to add user joe
sudo pure-pw useradd joe -u ftpuser -d /home/ftpusers/joe
Then to create you user database
sudo pure-pw mkdb
Then
sudo ln -s /etc/pure-ftpd/pureftpd.passwd /etc/pureftpd.passwd
and
sudo ln -s /etc/pure-ftpd/pureftpd.pdb /etc/pureftpd.pdb
and
sudo ln -s /etc/pure-ftpd/conf/PureDB /etc/pure-ftpd/auth/PureDB
which will create symbolic links between the respective files.
Next you need to modify the permissions of /home/ftpusers directory and of any other subdirectories. The owner must be ftpuser while Group must be ftpgroup
sudo chown -hR ftpuser:ftpgroup /home/ftpusers/
After doing that open up pureadmin in the terminal.
gksudo pureadmin
and stop firestarter if it is installed.
NOTES
The user joe is used as an example, you can change user joe and/or add or remove other users through pureadmin.
You may need to restart PureFTPD before changes take effect.
sudo /etc/init.d/pure-ftpd restart
SECURITY
FTP is by nature a rather unsecure protocol. Add TLS support to prevent your sessions from being vulnerable to man-in-the-middle-attacks
sudo apt-get install openssl
Enable TLS only mode in Pure-FTPd
sudo echo 2 > /etc/pure-ftpd/conf/TLS
or for a less secure version that also accepts insecure FTP connections
sudo echo 1 > /etc/pure-ftpd/conf/TLS
Make a private SSL key
sudo mkdir -p /etc/ssl/private/
Create your key
sudo openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
SSL certificates are inherently insecure if other users can read them. You must secure the certificate before it can be used by changing file permissions.
sudo chmod 600 /etc/ssl/private/pure-ftpd.pem
And now you need to restart Pure-FTPd
/etc/init.d/pure-ftpd restart
AMAZON AWS SETTINGS
If installing on an AWS server, you will need to configure IP address routing information specific to your server. If using the default UBUNTU server, use the following. Note that echo will not properly be able to edit a file unless you are in a sudo shell, which is why we use "sudo bash -c".
cd /etc/pure-ftpd/conf
sudo bash -c 'echo "35000 36000" > PassivePortRange'
sudo bash -c 'echo "YOURIPHERE" > ForcePassiveIP'
sudo bash -c 'echo "yes" > DontResolve'
These commands will allow most programs, like FileZilla, to connect via FTP passive mode to the server. Amazon AWS servers use internal IP addresses starting with "10." for most things, and you will need to explicitly define this IP address for your FTP software to be able to communicate.
Update your Amazon AWS Firewall settings.
"Custom TCP Range" 35000 36000
"Custom TCP Range" 21
Comments