I always wondered how hard it might be to get ftp running with encryption (preferably proFTPd since that has always been my choice ftp server).
I did realize how easy it was. Of course again this documentation really only refers to Fedora Core 5. I am sure you can take this info and put it towards any other linux os.
proFTPd+TLS extremely mini howto
- edit /etc/proftpd.conf
## Add the Following lines.. or uncomment them# TLS
# Explained at http://www.castaglia.org/proftpd/modules/mod_tls.html
TLSEngine on
TLSRequired on
TLSRSACertificateFile /etc/pki/tls/certs/proftpd.pem
TLSRSACertificateKeyFile /etc/pki/tls/certs/proftpd-key.pem
TLSCipherSuite \ ALL:!ADH:!DES
TLSOptions NoCertRequest
TLSVerifyClient off
TLSLog /var/log/proftpd/tls.log
- Create the proftp.pem and proftpd-key.pem files
## Run this command as root
openssl req -new -x509 -days 365 -nodes -out /etc/pki/tls/certs/proftpd.pem -keyout /etc/pki/tls/certs/proftpd-key.pem
- Start the proFTPd service
## Run the command as root
service restart proftpd
Continue below if your FTP server is behind a firewall or is part of a NAT
- Allow passive ftp to work… need to specify what passive ports to use
edit /etc/proftpd.conf
## Add the line below
PassivePorts 60000 60500
- Add the Passive ports through your firewall
edit /etc/sysconfig/iptables
## Add the line below (may need some changing to fit the format)
-A RH-Firewall-1-INPUT -p tcp -m tcp –dport 60000:60050 -j ACCEPT
This page will describe most of the default services found in a default installation of FC5. If you have some services that are not listed, then most likely they were installed by you for a reason or just because you like to check boxes! Anyways, you may want to go through your list of services and uncheck any that you don’t use to deflate fedora a little bit.
Fedora Core 5 Services
Source: http://pptpclient.sourceforge.net
No hacks are needed if you are using kernel 2.6.15 or above.
PPTP description:
“PPTP Client is a Linux, FreeBSD, NetBSD and OpenBSD client for the proprietary Microsoft Point-to-Point Tunneling Protocol, PPTP. Allows connection to a PPTP based Virtual Private Network (VPN) as used by employers and some cable and ADSL internet service providers.”
Features:
- Linux PPTP Server, Microsoft Windows VPN Server, many ADSL service providers, Cisco PIX.
- 128-bit stateless encryption using MPPE
- on-demand or persistent tunnels using pppd psuedo-tty support
- Synchronous HDLC PPP encoding
- Reordering of out of order packets
- runs on Linux, FreeBSD, NetBSD and OpenBSD.
HowTo(s):
