Vsftpd Set Download Only Anonymous Internet Server

Posted on in Categories CentOS, fedora linux, Howto, Iptables, Linux, Networking, PF Firewall, RedHat/Fedora Linux, Security last updated January 21, 2009

This example shows how you might set up a large internet facing FTP site for distributing file or software updates. The emphasis will be on security and performance. VSFTPD will make sure only world-readable files and directories are served to the world via anonymous / ftp account. You force to originates FTP port connections from a secure port – so users on the FTP server cannot try and fake file content. You will hide the FTP server user IDs and just display ftp in directory listings. This is also a performance boost. Set a 40000-60000 port range for passive connections. This will help firewall setup.