#Whether anonymous access is allowed, default is no
anonymous_enable=NO
#This setting must be YES for accounts in /etc/passwd to log in to our vsftpd host as real users
local_enable=YES
#Has write permission
write_enable=YES
# Mask for files or directories created by local users
local_umask=022
# When dirmessage_enable=YES, this setting allows vsftpd to look for this file to display messages! You can also set other filenames!
dirmessage_enable=YES
# When set to YES, both upload and download logs will be recorded. Logging is related to the next xferlog_file setting option:
xferlog_enable=YES
xferlog_std_format=YES
# Path for storing upload and download logs
xferlog_file=/var/log/xferlog
# Enable port 20
connect_from_port_20=YES
# System security settings:
ascii_download_enable=YES(NO)
If set to YES, clients can download files in ASCII format.
Generally, because enabling this setting may lead to DoS attacks, the default is NO.
ascii_upload_enable=YES(NO)
Similar to the previous setting, but this applies to uploads! The default is NO.
ascii_upload_enable=NO
ascii_download_enable=NO
# Combining these can achieve the following effects:
① When chroot_list_enable=YES and chroot_local_user=YES, users listed in /etc/vsftpd.chroot_list can switch to other directories; users not listed cannot switch to other directories.
② When chroot_list_enable=YES and chroot_local_user=NO,
Users listed in /etc/vsftpd.chroot_list cannot switch to other directories; users not listed can switch to other directories.
③ When chroot_list_enable=NO,
and chroot_local_user=YES, all users cannot switch to other directories.
④ When chroot_list_enable=NO,
and chroot_local_user=NO, all users can switch to other directories.
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list
# This is the name of the PAM module, placed in /etc/pam.d/vsftpd
pam_service_name=vsftpd
# Of course, we usually support TCP Wrappers!
tcp_wrappers=YES
# Without adding the following, an error will occur: 500 OOPS: vsftpd: refusing to run with writable root inside chroot()
allow_writeable_chroot=YES
# FTP port number
listen_port=60021
# Enable passive mode connection
pasv_enable=YES
# The above two settings are related to the port numbers used in passive mode. If you want to use ports 65400 to 65410 for passive data connections, you can set it like this
pasv_min_port=65400
pasv_max_port=65410
# FTP access directory
local_root=/data/ftp/
reverse_lookup_enable=NO