使特定网段用户能自由上传下载

2024-09-09 00:42:36

字体：大中小

来源：转载

供稿：网友

本人系菜鸟一个，前一段突发奇想做了以下的试验，现在问题解决了，把解决的方法总结一下，谨供参考，希望能给像我一样的菜鸟有所帮助。第一次写总结，总有如履薄冰，如临深渊的感觉，生怕误导别人。其中一定会有不妥或是错误，或者如果大家有什么更好的方法，希望大家提出来一起讨论。
解决过程中不少兄弟热情帮助尤其是wolfg斑竹的大力支持，十分感谢。

说明：在FC3上用vsftp实FTP服务。由于一些网段的用户为内部成员，不会对服务器造成危害。为了减少麻烦，更好地实现资源共享，现在想给他们的网段（本例中以10.0.1.*为例）的用户以自由上传下载的权利。

涉及的配置文件一共有四个：
vsftpd.conf
hosts.allow
/etc/vsftpd/local.class
/etc/vsftpd/other.class

内容：

hosts.allow
代码:
#
# hosts.allow This file describes the names of the hosts which are
# allowed to use the local INET services, as decided
# by the '/usr/sbin/tcpd' server.
vsftpd: 10.0.1.* : setenv VSFTPD_LOAD_CONF /etc/vsftpd/local.class
vsftpd: ALL : setenv VSFTPD_LOAD_CONF /etc/vsftpd/other.class

/etc/vsftpd/local.class
代码:
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES

/etc/vsftpd/other.class
代码:
write_enable=NO
anon_upload_enable=NO
anon_mkdir_write_enable=NO

vsftpd.conf
代码:
# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#

# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=YES
#
# Uncomment this to allow local users to log in.
# 不允许本地用户上传下载,即只允许基于ip的认证
#local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
# 在ftpd中的local.class和other.class文件中有write_enable=YES项
#write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create