FTP\u5206\u4e3a\u4e24\u7c7b<\/p>\n
\u4e3b\u52a8FTP(Port FTP)\uff0c\u4e5f\u5c31\u662f\u4e00\u822c\u7684FTP\ufe54\u88ab\u52a8FTP(Port FTP)<\/p>\n
\u4e3b\u52a8FTP<\/p>\n
\u4e3b\u52a8\u65b9\u5f0f\u7684FTP\u662f\u8fd9\u6837\u7684\uff1a\u5ba2\u6237\u7aef\u4ece\u4e00\u4e2a\u4efb\u610f\u7684\u975e\u7279\u6743\u7aef\u53e3N\uff08N>1024\uff09\u8fde\u63a5\u5230FTP\u670d\u52a1\u5668\u7684\u547d\u4ee4\u7aef\u53e3\uff0c\u4e5f\u5c31\u662f21\u7aef\u53e3\u3002\u7136\u540e\u5ba2\u6237\u7aef\u5f00\u59cb\u7aef\u53e3N+1\uff0c\u5e76\u53d1\u9001FTP\u547d\u4ee4\u201cport N+1\u201d\u5230FTP\u670d\u52a1\u5668\u3002\u63a5\u7740\u670d\u52a1\u5668\u4f1a\u4ece\u5b83\u81ea\u5df1\u7684\u6570\u636e\u7aef\u53e3\uff0820\uff09\u8fde\u63a5\u5230\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u6570\u636e\u7aef\u53e3\uff08N+1\uff09\u3002<\/p>\n
\u9488\u5bf9FTP\u670d\u52a1\u5668\u524d\u9762\u7684\u9632\u706b\u5899\u6765\u8bf4\uff0c\u5fc5\u987b\u5141\u8bb8\u4ee5\u4e0b\u901a\u8baf\u624d\u80fd\u652f\u6301\u4e3b\u52a8\u65b9\u5f0fFTP\uff1a<\/p>\n
1. \u4efb\u4f55\u7aef\u53e3\u5230FTP\u670d\u52a1\u5668\u768421\u7aef\u53e3 \uff08\u5ba2\u6237\u7aef\u521d\u59cb\u5316\u7684\u8fde\u63a5 S<-C\uff09<\/p>\n
2. FTP\u670d\u52a1\u5668\u768421\u7aef\u53e3\u5230\u5927\u4e8e1024\u7684\u7aef\u53e3\uff08\u670d\u52a1\u5668\u54cd\u5e94\u5ba2\u6237\u7aef\u7684\u63a7\u5236\u7aef\u53e3 S->C\uff09<\/p>\n
3. FTP\u670d\u52a1\u5668\u768420\u7aef\u53e3\u5230\u5927\u4e8e1024\u7684\u7aef\u53e3\uff08\u670d\u52a1\u5668\u7aef\u521d\u59cb\u5316\u6570\u636e\u8fde\u63a5\u5230\u5ba2\u6237\u7aef\u7684\u6570\u636e\u7aef\u53e3 S->C\uff09<\/p>\n
4. \u5927\u4e8e1024\u7aef\u53e3\u5230FTP\u670d\u52a1\u5668\u768420\u7aef\u53e3\uff08\u5ba2\u6237\u7aef\u53d1\u9001ACK\u54cd\u5e94\u5230\u670d\u52a1\u5668\u7684\u6570\u636e\u7aef\u53e3 S<-C\uff09<\/p>\n
\u4e3b\u52a8\u65b9\u5f0fFTP\u7684\u4e3b\u8981\u95ee\u9898\u5b9e\u9645\u4e0a\u5728\u4e8e\u5ba2\u6237\u7aef\u3002FTP\u7684\u5ba2\u6237\u7aef\u5e76\u6ca1\u6709\u5b9e\u9645\u5efa\u7acb\u4e00\u4e2a\u5230\u670d\u52a1\u5668\u6570\u636e\u7aef\u53e3\u7684\u8fde\u63a5\uff0c\u5b83\u53ea\u662f\u7b80\u5355\u7684\u544a\u8bc9\u670d\u52a1\u5668\u81ea\u5df1****\u7684\u7aef\u53e3\u53f7\uff0c\u670d\u52a1\u5668\u518d\u56de\u6765\u8fde\u63a5\u5ba2\u6237\u7aef\u8fd9\u4e2a\u6307\u5b9a\u7684\u7aef\u53e3\u3002\u5bf9\u4e8e\u5ba2\u6237\u7aef\u7684\u9632\u706b\u5899\u6765\u8bf4\uff0c\u8fd9\u662f\u4ece\u5916\u90e8\u7cfb\u7edf\u5efa\u7acb\u5230\u5185\u90e8\u5ba2\u6237\u7aef\u7684\u8fde\u63a5\uff0c\u8fd9\u662f\u901a\u5e38\u4f1a\u88ab\u963b\u585e\u7684\u3002<\/p>\n
<\/p>\n
\u9632\u706b\u5899\u8bbe\u7f6e\u7684\u4f8b\u5b50<\/p>\n
\u5efa\u7f6e\u4e00\u4e2a\u9632\u706b\u5899\u4e0b\u7684FTP server\uff0c\u4f7f\u7528\u4e3b\u52a8FTP(Port FTP) mode\uff1a\u9884\u8bbe\u7684FTP port:21 \u4ee5\u53caFTP data port:20<\/p>\n
\u6267\u884c\u4ee5\u4e0b\u4e24\u884c\u6307\u4ee4\uff0c\u53ea\u5141\u8bb8port 21 \u4ee5\u53caport 20 \u5f00\u653e\uff0c\u5176\u5b83\u5173\u95ed\u3002<\/p>\n
iptables -A INPUT -p tcp -m multiport –dport 21,20 -j ACCEPT<\/p>\n
iptables -A INPUT -p tcp -j REJECT –reject-with tcp-reset<\/p>\n
FTP\u8f6f\u4ef6\u672c\u8eab\u7684\u8bbe\u7f6e<\/p>\n
\u4ee5vsFTP\u4e3a\u4f8b\u5b50. \u4fee\u6539\/etc\/vsFTPd\/vsFTPd.conf<\/p>\n
\u65b0\u589e\u5e95\u4e0b\u4e24\u884c<\/p>\n
listen_port=21<\/p>\n
ftp_data_port=20<\/p>\n
\u8bbe\u7f6e\u9519\u4f1a\u51fa\u73b0\u7684\u60c5\u51b5<\/p>\n
FTP client\uff08\u5982cuteFTP\uff09\u7684\u8054\u673a\u65b9\u5f0f\u4e0d\u80fd\u591f\u9009\u62e9passive mode\uff0c\u5426\u5219\u65e0\u6cd5\u5efa\u7acb\u6570\u636e\u7684\u8054\u673a\u3002\u4e5f\u5c31\u662f\u8bfb\u8005\u53ef\u4ee5\u8fde\u4e0aFTP server\uff0c\u4f46\u662f\u6267\u884cls\u3001get \u7b49\u7b49\u7684\u6307\u4ee4\u65f6\uff0c\u4fbf\u65e0\u6cd5\u8fd0\u4f5c\u3002<\/p>\n
\u88ab\u52a8FTP<\/p>\n
\u4e3a\u4e86\u89e3\u51b3\u670d\u52a1\u5668\u53d1\u8d77\u5230\u5ba2\u6237\u7684\u8fde\u63a5\u7684\u95ee\u9898\uff0c\u4eba\u4eec\u5f00\u53d1\u4e86\u4e00\u79cd\u4e0d\u540c\u7684FTP\u8fde\u63a5\u65b9\u5f0f\u3002\u8fd9\u5c31\u662f\u6240\u8c13\u7684\u88ab\u52a8\u65b9\u5f0f\uff0c\u6216\u8005\u53eb\u505aPASV\uff0c\u5f53\u5ba2\u6237\u7aef\u901a\u77e5\u670d\u52a1\u5668\u5b83\u5904\u4e8e\u88ab\u52a8\u6a21\u5f0f\u65f6\u624d\u542f\u7528\u3002<\/p>\n
\u5728\u88ab\u52a8\u65b9\u5f0fFTP\u4e2d\uff0c\u547d\u4ee4\u8fde\u63a5\u548c\u6570\u636e\u8fde\u63a5\u90fd\u7531\u5ba2\u6237\u7aef\uff0c\u8fd9\u6837\u5c31\u53ef\u4ee5\u89e3\u51b3\u4ece\u670d\u52a1\u5668\u5230\u5ba2\u6237\u7aef\u7684\u6570\u636e\u7aef\u53e3\u7684\u5165\u65b9\u5411\u8fde\u63a5\u88ab\u9632\u706b\u5899\u8fc7\u6ee4\u6389\u7684\u95ee\u9898\u3002\u5f53\u5f00\u542f\u4e00\u4e2a FTP\u8fde\u63a5\u65f6\uff0c\u5ba2\u6237\u7aef\u6253\u5f00\u4e24\u4e2a\u4efb\u610f\u7684\u975e\u7279\u6743\u672c\u5730\u7aef\u53e3\uff08N > 1024\u548cN+1\uff09\u3002\u7b2c\u4e00\u4e2a\u7aef\u53e3\u8fde\u63a5\u670d\u52a1\u5668\u768421\u7aef\u53e3\uff0c\u4f46\u4e0e\u4e3b\u52a8\u65b9\u5f0f\u7684FTP\u4e0d\u540c\uff0c\u5ba2\u6237\u7aef\u4e0d\u4f1a\u63d0\u4ea4PORT\u547d\u4ee4\u5e76\u5141\u8bb8\u670d\u52a1\u5668\u6765\u56de\u8fde\u5b83\u7684\u6570\u636e\u7aef\u53e3\uff0c\u800c\u662f\u63d0\u4ea4 PASV\u547d\u4ee4\u3002\u8fd9\u6837\u505a\u7684\u7ed3\u679c\u662f\u670d\u52a1\u5668\u4f1a\u5f00\u542f\u4e00\u4e2a\u4efb\u610f\u7684\u975e\u7279\u6743\u7aef\u53e3\uff08P > 1024\uff09\uff0c\u5e76\u53d1\u9001PORT P\u547d\u4ee4\u7ed9\u5ba2\u6237\u7aef\u3002\u7136\u540e\u5ba2\u6237\u7aef\u53d1\u8d77\u4ece\u672c\u5730\u7aef\u53e3N+1\u5230\u670d\u52a1\u5668\u7684\u7aef\u53e3P\u7684\u8fde\u63a5\u7528\u6765\u4f20\u9001\u6570\u636e\u3002<\/p>\n
\u5bf9\u4e8e\u670d\u52a1\u5668\u7aef\u7684\u9632\u706b\u5899\u6765\u8bf4\uff0c\u5fc5\u987b\u5141\u8bb8\u4e0b\u9762\u7684\u901a\u8baf\u624d\u80fd\u652f\u6301\u88ab\u52a8\u65b9\u5f0f\u7684FTP:<\/p>\n
1. \u4ece\u4efb\u4f55\u7aef\u53e3\u5230\u670d\u52a1\u5668\u768421\u7aef\u53e3 \uff08\u5ba2\u6237\u7aef\u521d\u59cb\u5316\u7684\u8fde\u63a5 S<-C\uff09<\/p>\n
2. \u670d\u52a1\u5668\u768421\u7aef\u53e3\u5230\u4efb\u4f55\u5927\u4e8e1024\u7684\u7aef\u53e3 \uff08\u670d\u52a1\u5668\u54cd\u5e94\u5230\u5ba2\u6237\u7aef\u7684\u63a7\u5236\u7aef\u53e3\u7684\u8fde\u63a5 S->C\uff09<\/p>\n
3. \u4ece\u4efb\u4f55\u7aef\u53e3\u5230\u670d\u52a1\u5668\u7684\u5927\u4e8e1024\u7aef\u53e3 \uff08\u5165\uff1b\u5ba2\u6237\u7aef\u521d\u59cb\u5316\u6570\u636e\u8fde\u63a5\u5230\u670d\u52a1\u5668\u6307\u5b9a\u7684\u4efb\u610f\u7aef\u53e3 S<-C\uff09<\/p>\n
4. \u670d\u52a1\u5668\u7684\u5927\u4e8e1024\u7aef\u53e3\u5230\u8fdc\u7a0b\u7684\u5927\u4e8e1024\u7684\u7aef\u53e3\uff08\u51fa\uff1b\u670d\u52a1\u5668\u53d1\u9001ACK\u54cd\u5e94\u548c\u6570\u636e\u5230\u5ba2\u6237\u7aef\u7684\u6570\u636e\u7aef\u53e3 S->C\uff09<\/p>\n
\u9632\u706b\u5899\u8bbe\u7f6e\u7684\u4f8b\u5b50<\/p>\n
\u5efa\u7f6e\u4e00\u4e2a\u9632\u706b\u5899\u4e0b\u7684FTP server\uff0c\u4f7f\u7528\u88ab\u52a8FTP(Port FTP) mode\uff1aFTP port:21 \u4ee5\u53caFTP data port \u4ece9981 \u52309986\u3002<\/p>\n
\u6267\u884c\u4ee5\u4e0b\u4e24\u884c\u6307\u4ee4\uff0c\u53ea\u5141\u8bb8port 21 \u4ee5\u53caport 9981-9990 \u5f00\u653e\uff0c\u5176\u5b83\u5173\u95ed\u3002<\/p>\n
iptables -A INPUT -p tcp -m multiport –dport 21,9981,9982,9983,9984,9985,9986,9987,9988,9989,9990 -j ACCEPT<\/p>\n
iptables -A INPUT -p tcp -j REJECT –reject-with tcp-reset<\/p>\n
FTP\u8f6f\u4ef6\u672c\u8eab\u7684\u8bbe\u7f6e<\/p>\n
\u4ee5vsFTP\u4e3a\u4f8b\u5b50. \u4fee\u6539\/etc\/vsFTPd\/vsFTPd.conf<\/p>\n
\u65b0\u589e\u5e95\u4e0b\u56db\u884c<\/p>\n
listen_port=21<\/p>\n
pasv_enable=YES<\/p>\n
pasv_min_port=9981<\/p>\n
pasv_max_port=9986<\/p>\n
\u8bbe\u7f6e\u9519\u4f1a\u51fa\u73b0\u7684\u60c5\u51b5<\/p>\n
\u8fd9\u4e2a\u4f8b\u5b50\u4e2d\uff0cFTP client\uff08\u5982cuteFTP\uff09\u7684\u8054\u673a\u65b9\u5f0f\u5fc5\u987b\u9009\u62e9passive mode\uff0c\u5426\u5219\u65e0\u6cd5\u5efa\u7acb\u6570\u636e\u7684\u8054\u673a\u3002\u4e5f\u5c31\u662f\u8bfb\u8005\u53ef\u4ee5\u8fde\u4e0aFTP server\uff0c\u4f46\u662f\u6267\u884cls,get \u7b49\u7b49\u7684\u6307\u4ee4\u65f6\uff0c\u4fbf\u65e0\u6cd5\u8fd0\u4f5c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
FTP\u5206\u4e3a\u4e24\u7c7b \u4e3b\u52a8FTP(Port FTP)\uff0c\u4e5f\u5c31\u662f\u4e00\u822c\u7684FTP\ufe54\u88ab\u52a8FTP(Port FTP) \u4e3b\u52a8FTP \u4e3b\u52a8\u65b9\u5f0f\u7684FTP\u662f\u8fd9\u6837\u7684\uff1a\u5ba2\u6237\u7aef\u4ece\u4e00\u4e2a\u4efb\u610f\u7684\u975e\u7279\u6743\u7aef\u53e3N\uff08N>1024\uff09\u8fde\u63a5\u5230FTP\u670d\u52a1\u5668\u7684\u547d\u4ee4\u7aef\u53e3\uff0c\u4e5f\u5c31\u662f21\u7aef\u53e3\u3002\u7136\u540e\u5ba2\u6237\u7aef\u5f00\u59cb\u7aef\u53e3N+1\uff0c\u5e76\u53d1\u9001FTP\u547d\u4ee4\u201cport N+1\u201d\u5230FTP\u670d\u52a1\u5668\u3002\u63a5\u7740\u670d<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[37],"tags":[39,41,42,43,40,38],"_links":{"self":[{"href":"https:\/\/www.codeeel.com\/index.php?rest_route=\/wp\/v2\/posts\/65"}],"collection":[{"href":"https:\/\/www.codeeel.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.codeeel.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.codeeel.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.codeeel.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=65"}],"version-history":[{"count":1,"href":"https:\/\/www.codeeel.com\/index.php?rest_route=\/wp\/v2\/posts\/65\/revisions"}],"predecessor-version":[{"id":66,"href":"https:\/\/www.codeeel.com\/index.php?rest_route=\/wp\/v2\/posts\/65\/revisions\/66"}],"wp:attachment":[{"href":"https:\/\/www.codeeel.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=65"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.codeeel.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=65"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.codeeel.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=65"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}