Vsftpd + tcp_wrappers host and user access control

RHEL4 in vsftpd support at compile time has tcp_wrappers, so you can use tcp_wrappers to achieve the host access control.

Before the experiment, first said the implementation of the next order of tcp-wrappers:

First implementation of the hosts.allow, if hosts.allow inside the list, the list of the machine is allowed access; otherwise, then scroll down to hosts.deny, if the hosts.deny list inside, then refused to list the machine access, if also not (that is, which do not allow and deny list) is allowed access to the host.

Real life, host.allow can also set "Reject" feature, so generally only use / etc / hosts.allow for access control can host.

(A) of the host access control

The host (192.168.1.102) to configure vsftpd service, so in addition to 192.168.1.100 192.168.1.0/24 network segment other than to allow other hosts to access the FTP service.

Program very simple, edit / etc / hosts.allow

vsftpd: 192.168.1.100: DENY

vsftpd: 192.168.1.

Restart vsftpd, experimental purposes can be achieved, we can tcp_wrappers in the experiment will do more complex experiments.

(B) User Access Control

vsftpd flexible user access control. In the specific implementation, vsftpd user access control is divided into two categories: the first is the traditional list of users / etc / vsftpd / ftpusers, I understand it as the system list (that is, the system prohibited); second is to improve the user list file / etc / vsftpd / user_list, I understand it as they want to ban list

To realize the second list control must be inside vsftpd.conf

userlist_enable = YES

userlist_deny = YES / / This article is the system default exists, that is also unnecessary to add the system defaults to YES

userlist_file = / etc / vsftpd / usrer_list

The above simple experiment can be achieved vsftpd powerful control.







Recommended links:



wholesale kingsun V602A wifi phone java bluetooth



The Fate of Sina and Sohu, Sina too poor to only ads



Barbed Words! Photoshop Special Effects Make The Word Cactus



OPTIMISTIC about the four reasons OPhone



Mito Xiu 1 minute to create non-mainstream days



Compilers And Interpreters Report



The Complete Production Process Of A CG - 2 Color (background Color)



FLV To PSP



Premier Web Servers



Charles Zhang Said Sohu Sogou Do Not Intend To Use The Input Method Earnings



OGM to MP4



e-cology in the Pan Micro Series 42



Shi Jian: create their own aviation nerve



OGM to MKV



REVIEW Animation Tools