Restart the FTP server: sudo systemctl restart vsftpd Save the file using Ctrl+O, hit the Enter key, and then exit using Ctrl+X. This will deny access to Anonymous connection over SSL and force users to transfer data and log in using SSL only:

Rsa_private_key_file=/etc/ssl/private/vsftpd.pemĪlso, scroll to the end of the file and add: allow_anon_ssl=NO As shown below: rsa_cert_file=/etc/ssl/private/vsftpd.pem Also, change ssl_enable=NO to ssl_enable=YES. Rsa_private_key_file= /etc/ssl/private/ssl-cert-snakeoil.keyĬhange the values of rsa_cert_file and rsa_private_key_file directives with the path of the SSL & Private key file we have generated. Scroll down to find the following lines and change their values as shown further: rsa_cert_file= /etc/ssl/certs/ssl-cert-snakeoil.pem Once you have generated the SSL certificate, edit the VSFTPD configuration file and add the location of the Private key and SSL certificate to that. This will generate the required 2048-bit private key and self-signed SSL certificate. On your command terminal, first, run: sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/private/vsftpd.pem Setup SSL/TSL for Vsftpd on Ubuntu 20.04īy default, the data transfer using the Vsftpd FTP server will not be in an encrypted format even the credentials, to remove this security flaw we can configure SSL using OpenSSL to provide encryption. Save the file by using Ctrl+O, hit the Enter Key, and Exit the file using Ctrl+X.Īlso, don’t forget to open ports in the firewall, if you are using UFW then use this command other wiser open the system in your cloud or network firewall. pasv_min_port=30000Īlso, add the following lines which make sure the VSFTPD only allows the access of users to the FTP server which are in its list not anyone randomly. Use vim or nano to edit the file: sudo chrootlocaluserYES sudo chrootlistfile/etc/vsftpd. You do so by turning on the following command in /etc/vsftpd. However, both the server and the client must support passive FTP mode for this process to work. However, the passive ports must be allowed in the server firewall. Securing Ubuntu vsftpd Server First step in securing the FTP server is to limit the user access. The Vsftpd uses active mode by default on ports – 20 / 21 to communicate if you want to set up passive mode as well which works if there is some firewall issue between client and server. Scroll to the end of the file and the following lines, this will ensure that when a user login the FTP server, it routes to the directory that is meant to be accessed. Replace the ip and domain info in the above instances with those rts with the. An anonymous server was used here to execute the test. FTP server computers have their users logged on using the.com and.ip addresses.

Find the below line and remove the # given in front of it to enable it. To connect to the FTP server, simply type ‘ftp’ into the terminal window and give the domain name as the address of the server. So, that they can’t access the files outside of their home directories. Now, restrict local users to their home directories. Restrict local users to their home directory

Ftp server ubuntu