Ubuntu setting up ftp server how to#
Ubuntu setting up ftp server install#
Ubuntu setting up ftp server free#

Run the following commands to open ports 21 (FTP command port), 20 (FTP data port), and 30000-31000 (Passive ports range): sudo ufw allow 20:21/tcp You must allow FTP traffic if you are using a UFW firewall. To make changes take effect, save the file and restart the vsftpd service: sudo systemctl restart vsftpd Rsa_cert_file=/etc/ssl/private/vsftpd.pem Restart the vsftpd ServiceĪfter you've finished editing, the vsftpd configuration file (excluding comments) should look like this: listen=NO If nothing else is specified, the FTP server will only use TLS to make secure connections. Rsa_private_key_file=/etc/ssl/private/vsftpd.pem The certificate and the private key will be saved in the same file.Īfter you've created the SSL certificate, open the vsftpd configuration file: sudo nano /etc/nfĬhange the values of the rsa_cert_file and rsa_private_key file directives to the pam file path, and set the ssl_enable directive to YES: rsa_cert_file=/etc/ssl/private/vsftpd.pem We will generate a 2048-bit private key and a self-signed SSL certificate with a ten-year validity period: sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/private/vsftpd.pem

Ubuntu setting up ftp server free#

If you have a domain or subdomain that points to the IP address of the FTP server, you can quickly generate a free Let's Encrypt SSL certificate. You can use an existing SSL certificate signed by a trusted Certificate Authority or create your own. You must have an SSL certificate and configure the FTP server to use it in order to encrypt FTP transmissions with SSL/TLS. When you enable this option, you must explicitly specify which users can log in by adding their names to the /etc/er list file (one user per line).

Add the following lines to the end of the file to accomplish this: userlist_enable=YES You can instruct vsftpd to allow only certain users to log in. When you enable passive mode, the FTP client connects to the server on a random port in the range you specify. Passive FTP connections can be made on any port. To use passive mode, set the minimum and maximum range of ports: pasv_min_port=30000 4) Passive FTP Connectionsīy default, vsftpd uses active mode. Use this option only if you must grant writable access to your user to its home directory. Method 2 - Another option is to enable the allow_writeable_chroot directive:.In this example, we will create an ftp directory inside the user home to serve as the chroot, as well as a writable uploads directory for file uploads: Method 1 - It is advised to keep the chroot feature enabled and to configure FTP directories.To allow uploads when chroot is enabled, use one of the following solutions: When chroot is enabled, vsftpd will refuse to upload files by default for security reasons if the directory in which the users are locked is writable. Uncomment the line beginning with chroot_local_user to prevent local FTP users from accessing files outside of their home directories. To allow filesystem changes such as uploading and removing files, locate and uncomment the write_enable directive: write_enable=YES Find the anonymous enable and local enable directives and compare your configuration to the lines below: anonymous_enable=NO Only local users will have access to the FTP server. To begin, open the vsftpd configuration file: sudo nano /etc/nf In the sections that follow, we will go over some critical settings required to configure a secure vsftpd installation. Visit the vsftpd documentation page to see all available options. The majority of the server configuration options are well documented within the file. The /etc/nf file contains the vsftpd server configuration. Loaded: loaded (/lib/systemd/system/rvice enabled vendor preset: enabled)Īctive: active (running) since Tue 15:17:22 UTC 3s ago The following output should indicate that the vsftpd service is active and running: Output Print the service status to confirm: sudo systemctl status vsftpd Once the installation is complete, the ftp service will begin automatically.

Ubuntu setting up ftp server install#

Execute the following commands to install it: sudo apt update

The vsftpd package can be found in the Ubuntu repositories.

Ubuntu setting up ftp server how to#

We'll also show you how to configure the server so that users can only access their home directory and that the entire transmission is encrypted with SSL/TLS.Īlthough FTP is a popular protocol, SCP or SFTP should be used for more secure and faster data transfers. We'll set up vsftpd (Very Secure Ftp Daemon), a reliable, secure, and quick FTP server. PureFTPd, ProFTPD, and vsftpd are the most well-known and widely used. For Linux, there are several open-source FTP servers. This tutorial explains how to install and configure an FTP server on Ubuntu 20.04 for file sharing between devices.įTP (File Transfer Protocol) is a network protocol that is used to transfer files from and to a remote network.