![\"ProFTPD](\"https:\/\/linuxadmin.io\/wp-content\/uploads\/2017\/07\/installing_proftpd.png\")
<\/p>\n<\/p>\n
ProFTPd is an Open source FTP daemon, widely used for its granular configuration ability. This is a guide to provide install methods for both CentOS 7 aswell as CentOS 6 and below. You can read more about ProFTPD on the project\u2019s website<\/a>.<\/p>\n ProFTPD is in the EPEL repository, you will need to install that first:<\/p>\n yum -y install epel-release<\/p>\n Run a yum update to ensure everything is up to date<\/p>\n yum -y update<\/p>\n Install ProFTPD<\/p>\n yum -y install proftpd<\/p>\n nano \/etc\/proftpd.conf<\/p>\n Change the server name:<\/p>\n ServerName “ProFTPD server”<\/p>\n To your servers hostname. Go ahead and save the file afterwards.<\/p>\n Go ahead and restart the service and enable it.<\/p>\n On CentOS 7:<\/p>\n Restart the service:<\/p>\n systemctl restart proftpd<\/p>\n Make sure the service will start after a reboot:<\/p>\n systemctl enable proftpd<\/p>\n On CentOS 6(and below):<\/p>\n Restart the service:<\/p>\n service proftpd restart<\/p>\n Make sure the service will start on reboot:<\/p>\n chkconfig –add proftpd If you are currently using a firewall, you will need to allow incoming FTP connections.<\/p>\n Allow the port for incoming:<\/p>\n firewall-cmd –permanent –add-port=21\/tcp<\/p>\n then reload the firewall:<\/p>\n firewall-cmd-reload<\/p>\n Add the new rule:<\/p>\n iptables -A INPUT -p tcp -m tcp –dport 20:21 -j ACCEPT<\/p>\n Save the new firewall ruleset:<\/p>\n iptables-save > \/etc\/sysconfig\/iptables<\/p>\n Passive mode can sometimes resolve certain clients ability to connect to the FTP server which may have been blocked by firewalls. If you are having issues connecting remotely, would like you to try to to enable passive connections in ProFTPD you will need to edit \/etc\/proftpd.conf<\/p>\n nano \/etc\/proftpd.conf<\/p>\n And add the following lines:<\/p>\n PassivePorts 60000 65535 You will then also need to add the passive range in the firewall<\/p>\n Add the new rule:<\/p>\n iptables -A INPUT -p tcp -m tcp –dport 60000:65535 -j ACCEPT<\/p>\n Save the ruleset:<\/p>\n iptables-save > \/etc\/sysconfig\/iptables<\/p>\n Add the new port range:<\/p>\n firewall-cmd –permanent –add-port=60000-65535\/tcp<\/p>\n Reload the firewall:<\/p>\n firewall-cmd-reload<\/p>\n You can test the FTP configuration locally first to ensure the daemon is running by using netstat<\/p>\n # netstat -plan|grep :21 You can also connect locally by installing the ftp client<\/p>\n yum install -y ftp<\/p>\n And then making a connection to the localhost or 127.0.0.1<\/p>\n # ftp localhost And enter and valid username and password and it should authenticate. If it does not let you in, the authentication messages are written to \/var\/log\/secure.<\/p>\n Jul 17, 2017LinuxAdmin.io<\/p>\nInstall ProFTPD<\/h2>\n
Configure ProFTPD<\/h3>\n
Enable and Start Proftpd<\/h3>\n
\nchkconfig proftpd on<\/p>\nEnable FTP in the firewall<\/h3>\n
Firewalld<\/h4>\n
Iptables<\/h4>\n
Enabling passive connections in ProFTPD<\/h2>\n
\nAllowStoreRestart on
\nAllowRetrieveRestart on
\nTimeoutNoTransfer 65535
\nListOptions “-la”
\nTimeoutIdle 65535<\/p>\nIptables:<\/h4>\n
Firewalld:<\/h4>\n
Testing The FTP Service<\/h2>\n
\ntcp6 0 0 :::21 :::* LISTEN 22089\/proftpd: (acc<\/p>\n
\nTrying ::1…
\nConnected to localhost (::1).
\n220 FTP Server ready.
\nName (localhost:root):<\/p>\n