How to Set Up vsftpd FTP on Ubuntu Linux

Configuration Options^[2]

1. listen_ipv6, whether to run as standalone with IPv6. Unlike the listen parameter, vsftpd will listen on an IPv6 socket instead of an IPv4 one. This parameter and the listen parameter are mutually exclusive.

   1. Allowed values: Boolean (YES/NO)
   2. Default value: NO
2. anonymous_enable, whether to allow anonymous FTP. Beware - this option is turned on by default which might cause some security trouble.

   1. Allowed values: Boolean
   2. Default value: YES
3. local_enable, whether local logins are permitted. If enabled, normal user accounts in /etc/passwd may be used to log in.

   1. Allowed values: Boolean
   2. Default value: NO
4. write_enable, whether to allow any FTP commands which change the file system such as stor, dele, rnfr, rnto, mkd, rmd, appe and site

   1. Allowed values: Boolean
   2. Default value: NO
5. anon_upload_enable, whether to allow the anonymous FTP user to upload files. For this to work, the option write_enable must be enabled, and the anonymous ftp user must be given write permission on any desired upload location.

   1. Allowed values: Boolean
   2. Default value: NO
6. anon_mkdir_write_enable, whether you want the anonymous FTP user to be able to create new directories. Like above, write_enable must be enabled.

   1. Allowed values: Boolean
   2. Default value: NO
7. dirmessage_enable, whether to activate directory messages - messages given to remote users when they go into a certain directory.

   1. Allowed values: Boolean
   2. Default value: NO (in the sample configuration file, it is enabled)
8. xferlog_enable, whether to activate logging of uploads/downloads. By default, the log file will be placed at /var/log/vsftpd.log, but this location may be overridden using the configuration setting vsftpd_log_file

   1. Allowed values: Boolean
   2. Default value: NO (in the sample configuration file, it is enabled)
9. xferlog_std_format, whether to have your log file in standard ftpd xferlog format.

   1. Allowed values: Boolean
   2. Default value: NO
10. connect_from_port_20, whether to make sure PORT transfer connections originate from port 20 (ftp-data).

    1. Allowed values: Boolean
    2. Default value: NO (in the sample configuration file, it is enabled)
11. async_abor_enable, whether the server will recognize asynchronous ABOR requests. Not recommended for security (the code is non-trivial). Not enabling it, however, may confuse older FTP clients.

    1. Allowed values: Boolean
    2. Default value: NO
12. ascii_upload_enable and ascii_download_enable. By default the server will pretend to allow ASCII mode but in fact ignore the request. Turn on the below options to have the server actually do ASCII mangling on files when in ASCII mode. Beware that on some FTP servers, ASCII support allows a denial of service attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd predicted this attack and has always been safe, reporting the size of the raw file. ASCII mangling is a horrible feature of the protocol.

    1. Allowed values: Boolean
    2. Default value: NO
13. chown_uploads and chown_username. If you want, you can arrange for uploaded anonymous files to be owned by a different user. Note! Using "root" for uploaded files is not recommended!

    1. Allowed values: chown_uploads is Boolean, chown_username is a username string
    2. Default value: chown_uploads defaults to NO and chown_username defaults to "root"
14. xferlog_file. You may override where the log file goes if you like. The default is shown below.

    1. Allowed values: path string
    2. Default value: {{green}/var/log/vsftpd.log}}
15. idle_session_timeout, which will enable you to change the default value for timing out an idle session.

    1. Allowed values: Numeric
    2. Default value: 300
16. data_connection_timeout, which enable you to change the default value for timing out a data connection.

    1. Allowed values: Numeric
    2. Default value: 300
17. nopriv_user. It is recommended that you define on your system a unique user which the ftp server can use as a totally isolated and unprivileged user.

    1. Allowed values: Username string
    2. Default value: nobody
18. ftpd_banner, which allows you to fully customize the login banner string.

    1. Allowed values: String
    2. Default value: none - default vsftpd banner is displayed
19. deny_email_enable and banned_email_file enable you to specify a file of disallowed anonymous e-mail addresses. Apparently useful for combating certain DOS attacks.

    1. Allowed values: File path string for banned_email_file and Boolean for deny_email_enable
    2. Default value: NO for deny_email_enable and /etc/vsftpd.banned_emails for banned_email_file
20. chroot_local_user, which allows you to restrict local users to their home directories.

    1. Allowed values: Boolean
    2. Default value: NO
21. chroot_list_enable and chroot_list_file. You may specify an explicit list of local users to chroot() to their home directory. If chroot_local_user is YES, then this list becomes a list of users to NOT chroot().

    1. Allowed values: File path string for chroot_list_file and Boolean for chroot_list_enable
    2. Default value: NO for chroot_list_enable and /etc/vsftpd.chroot_list for chroot_list_file
22. ls_recurse_enable, which enable you to activate the "-R" option to the builtin ls. This is disabled by default to avoid remote users being able to cause excessive I/O on large sites. However, some broken FTP clients such as "ncftp" and "mirror" assume the presence of the "-R" option, so there is a strong case for enabling it.

    1. Allowed values: Boolean
    2. Default value: NO
23. secure_chroot_dir. Some of vsftpd's settings don't fit the Debian filesystem layout by default. These settings are more Debian-friendly. This option should be the name of a directory which is empty. Also, the directory should not be writable by the ftp user. This directory is used as a secure chroot() jail at times vsftpd does not require file system access.

    1. Allowed values: File path string
    2. Default value: /usr/share/empty
24. pam_service_name, is the name of the PAM service vsftpd will use.

    1. Allowed values: string
    2. Default value: ftp
25. rsa_cert_file, specifies the location of the RSA certificate to use for SSL encrypted connections

    1. Allowed values: File path string
    2. Default value: /usr/share/ssl/certs/vsftpd.pem
26. local_umask. Default umask for local users is 077. You may wish to change this to 022, If your users expect that (022 is used by most other ftpd's)

    1. Allowed values: Numeral
    2. Default value: 077