Linux – vsftpd listen on multiple listen_address but not on all

ftplinuxvsftpd

I'm looking for a way to configure vsftpd to use multiple listen_address IPs. I'm aware that if I set it to the default, it will listen on all available interface IPs, but that's not what I'm looking for.

Is there a way to configure something like this?

listen_address=192.168.1.3,192.168.1.4,192.168.1.5

Regards

Best Answer

If the machine is multi homed with 2 or more IP addresses, then you can setup multiple vsftpd services. Make a copy of the vsftpd.conf, adjust the listen_address to the additional IP address. Start another vsftpd daemon using the new config file.

Related Solutions

Iptables – How to configure vsftpd and iptables to listen on port 21 but run on another port

I think what you are looking for is REDIRECT:

iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 21 -j REDIRECT --to-port 20000

And you need to use passive-ftp.

Linux – Using PAM and vsftpd without root access

Your better answer may be to migrate away from vsftpd to proftpd, which can support the need for virtual users without PAM integration. In your /etc/proftpd.conf you'd include lines like:

AuthPAMAuthoritative            off
AuthPam                         off
AuthUserFile                    /opt/etc/passwd.ftp
AuthGroupFile                   /opt/etc/group.ftp

The group.ftp file is just a standard group setup for 'ftp' and 'nobody', and your passwd file would assign the user:group the same for all entries. You'd just specifiy usernames, passwords and login directories (use /sbin/nologin for the shell). It takes all of 5 minutes to set up if your admin will get the groundwork in place for you, and allow you to own/edit the password file.

Best Answer

Related Solutions

Iptables – How to configure vsftpd and iptables to listen on port 21 but run on another port

Linux – Using PAM and vsftpd without root access

Related Topic