跳至主要内容

vsftpd.conf设置备忘


  • listen=YES    表示vsftpd以stand alone方式来唤醒
  • anonymous_enable=NO    不允许匿名登录
  • local_enable=YES    /etc/passwd以内帐号才能以实体用户方式登录
  • write_enable=YES    允许用户上传数据
  • local_umask=022    设置权限022，建立新目录与文件的权限
  • user_sub_token=$USER  Automatically generate a home directory for each virtual user, based on a template
     
  • local_root=/home/www    更改主目录为....
    • 也有用local_root=/home/www/$USER     即名称可以随虚拟用户名字改变
  • chroot_local_user=YES    限制用户在用户主目录之内,chroot user and lock down to home directory
  • chroot_list_enable=YES    启用chroot写入列表功能，与下面文件相关
  • chroot_list_file=/etc/vsftpd/chroot_list    设置虚拟用户限制
  • allow_writeable_chroot=YES    In order to allow local users to write
  • hide_ids=YES     hide ids from user

#virutal user settings


  • guest_enable=YES    任何实体帐号均被假设为guest，activates virtual users(开启虚拟用户)
  • virtual_use_local_privs=YES     Virtual users will use the same privileges as local users
  • pam_service_name=vsftpd_virtual    PAM模块的名称
  • nopriv_user=vsftpd    vsftpd默认以vsftpd作为此服务执行者，即便入侵，权限在此
  • guest_username=vsftpd   虚拟用户对应的系统用户，实际在Linux中操作的是vsftpd
  • hide_ids=YES    
  • user_config_dir=/etc/vsftpd/user     为虚拟用户进入的主文件夹，规定可执行命令
  • pasv_enable=YES    支持数据流的被动式连接
  • pasv_min_port=3000     最小端口
  • pasv_max_port=3100     最大端口

#max conn

  • max_clients=20    设置同一时间最多多少可以连接
  • max_per_ip=10    同一IP同一时间多少连接
  • connect_timeout=30    主动式连接模式下，30秒内客户端不回应则断开
  • accept_timeout=30    被动式模式下，等待客户端30秒
  • idle_session_timeout=30    30秒内无命令，强制脱机

#log

  • xferlog_enable=YES    上传和 下载记录都会被记录
  • xferlog_file=/var/log/xferlog    日志文件文件名
  • vsftpd_log_file=/var/log/vsftpd.log    特色log文件
  • dual_log_enable=YES    具有vsftpd独特日志文件格式

#建议加上的内容

  • use_localtime=YES


 案例学习

 配置手册：VSFTPD.CONF

另外一个比较好的帖子，linux培训学习--FTP服务配置
亮点
  • 源码编译vsftpd学习




标签：

Popular posts from 产品随想的博客

Steve Jobs at 44, By Michael Krantz, 1999

Differences and Similarities Between Apple and Pixar Apple turns out many products--a dozen a year; if you count all the minor ones, probably a hundred. Pixar is striving to turn out one a year. But the converse of that is that Pixar's products will still be used fifty years from now, whereas I don't think you'll be using any product Apple brings to market this year fifty years from now. Pixar is making art for the ages. Kids will be watching Toy Story in the future. And Apple is much more of a constant race to continually improve things and stay ahead of the competition.  His Role At Pixar At Pixar my job is to help build the studio and recruit people and help create a situation where they can do the best work of their lives. And to some degree it's the same at Apple. But at Pixar, I don't direct the movies, whereas at Apple probably, if I had to pick a role out of a film production, I'd be the director. So it...
阅读全文

Foobar2000 组件安装教程

 原作者 博客地址   汉化作者 Asion博客   关于foobar 2000的一些资源 前言 foobar2000 由于其软件架构特点以及开放的姿态，使得第三方很容易开发组件（component）来拓展它的功能。由于在官网下载的默认安装文件只带了少量几个默认的组件，满足不了使用的需求，例如：默认不带 ape，tta，tak 等音频文件格式的解码器，很多无损压缩格式音乐没法播放。所以自己下载安装组件是必备的基本技能。 foobar2000 的中文汉化版（Asion 汉化）为了方便使用，集成了无损压缩文件解码器以及一些其它有用的插件，安装时选上即可，不喜欢折腾的建议使用汉化版。 这里组件指的是 foobar2000 标准组件（*.dll 文件），而非 vst 插件等其它插件，姑且把组件分为两类： 官方组件： 英文版安装包自带，安装时可选择； 第三方组件：非官方自带的组件 除了 foo_input_std.dll 和 foo_ui_std.dll 这两个组件是必须的外，其它的所有组件都 非必需 的，可以随需要增删。第三方组件可以去 官网 、 官方论坛 或者 官方 wiki 去找，也可以去贴吧等地逛逛。 下载 还是要强调一下，这里说的是 foobar2000 component ，不是中文网上通常说的 vst 插件。 下载好的组件包一般是 xxx.zip 或 xxx.fb2k-component 格式的文件，也有用 7z 打包的。前两种都是 zip 压缩（只要把 fb2k-component 改成 zip 文件就变成了 zip： 包）。标准状况下压缩包里的内容结构应该是 xxx.zip yyy.dll README.txt (可能没有) LICENCE.txt (可能没有) (其它杂七杂八） 除少数外一般只有一个 xxx.dll 文件.一定要注意压缩包结构不能是: xxx.zip yy folder (文件夹） zzz.dll … 否则要解压缩，提取那个 dll 文件。 安装 方法一（推荐） 打开 foobar2000 的菜单 文件 > 首选项(file >preferences) 的 组件(components...
阅读全文

360T7 刷机步骤及固件

https://cmi.hanwckf.top/p/360t7-firmware/   360T7的固件支持由immortalwrt-mt798x项目提供支持，请参考： https://cmi.hanwckf.top/p/immortalwrt-mt798x https://github.com/hanwckf/immortalwrt-mt798x 刷机步骤 参考 此处 的办法开启原厂固件的UART和telnet功能 在以下链接下载360T7测试固件（纯净版，无任何插件） https://wwd.lanzout.com/b0bt9idwd 密码:ezex （此固件已过时，请选择其它更新的固件） 接下来将刷入修改版uboot。修改版uboot的优点有： 固件分区可达108MB，原厂uboot只能使用36M 自带一个简单的webui恢复页面 到以下仓库的Release页面下载uboot，目前暂时仅支持360T7，后续将支持更多mt798x路由器。 推荐使用 mt7981_360t7-fip-fixed-parts.bin ， fixed-parts 代表uboot分区表在编译期间固定，不会随着uboot环境变量变化。 https://github.com/hanwckf/bl-mt798x/releases/latest 将 mt7981_360t7-fip-fixed-parts.bin 通过HFS等方式上传到路由器，使用以下命令刷入uboot mtd write mt7981_360t7-fip-fixed-parts.bin fip 确认刷入完毕后，拔掉路由器电源。然后将电脑的IP地址设置为固定的 192.168.1.2 ，接着按住路由器的RESET按钮后通电开机，等待8s后用浏览器进入 192.168.1.1 在uboot恢复页面选择要刷入的固件。immortalwrt-mt798x目前编译两个版本的360T7固件。 建议修改版uboot直接使用 immortalwrt-mediatek-mt7981-mt7981-360-t7-108M-squashfs-factory.bin ，两种固件区别如下： mt7981-360-t7-108M 为108M固件分区，原厂uboot不可启动，需要修改版u...
阅读全文

产品随想 | 周刊 第108期：Invent instruments that don't exist. Invent sounds that don't exist

  J. Paul Getty Museum   https://artsandculture.google.com/pocketgallery/DAWRu4WOO5gsew?hl=en 这有可能是Apple Vision Pro的优雅应用 The Mycroft Project   https://mycroftproject.com/ OpenSearch标准，来自Apple Sherlock的遗产，一切开始连接 'Artifacts' book   https://shop.porsche.com/gb/en-GB/p/-artifacts-book-P-MAP09000723-B/MAP09000723 认识更多保时捷 Deep Learning System & AI System   https://github.com/chenzomi12/DeepLearningSystem Deep Learning System core principles introduction. Betterfox   https://github.com/yokoffing/Betterfox Firefox user.js for speed, privacy, and security. Your favorite browser, but better. Browsers for Daily Using   https://anhkhoakz.neocities.org/blog/browsers-for-daily-using/ In 2010, a New York Times reporter had a conversation that revealed a lot about the life of the founder of Apple. Nick Bilton commented, “Your kids must love the iPad, right?” After the launch of the device. Jobs replied, “They haven't used it. We limit the amount of technology our ...
阅读全文

Steve Jobs: `There's Sanity Returning', 1998

Nobody can doubt the charisma of Steven P. Jobs. The interim CEO of Apple Computer Inc., who returned to the company last July after his ignominious 1985 ouster, has brought back his legendary vision, impatience, and infectious passion for the Macintosh. Jobs spoke to Business Week Correspondent Andy Reinhardt in Apple's stark, fourth-floor boardroom, just after the company rolled out its new software strategy on May 11. Note: This is an extended, online-only version of the Q&A that appears in the May 25, 1998, issue of Business Week. Q: Now that you've introduced the new, bold-looking iMac, are you going to do some radically different products? A: There's a lot of talk about such things -- about handhelds, set-top boxes. A lot of computer companies have been searching for a consumer product. My view is that the personal computer has been the most successful consumer product of the last 10 years. What we have to do, what the industry stopp...
阅读全文

Steve Jobs talks about the difference between art and technology

  When asked by   Time   magazine about the difference between art and technology, Jobs said, “I’ve never believed that they’re separate. Leonardo da Vinci was a great artist and a great scientist. Michelangelo knew a tremendous amount about how to cut stone at the quarry. The finest dozen computer scientists I know are all musicians. Some are better than others, but they all consider that an important part of their life. I don’t believe that the best people in any of these fields see themselves as one branch of a forked tree. I just don’t see that. People bring these things together a lot. Dr. Land at Polaroid said, ‘I want Polaroid to stand at the intersection of art and science,’ and I’ve never forgotten that. I think that that’s possible, and I think a lot of people have tried.”
阅读全文

2018各行业应届生薪资不完全样本往期汇总-职场红领巾

文章来源自职场红领巾公众号2018.4.21日推送，在此表示感谢 产品岗 百度商业产品 14K*14 拼多多产品管培 12K*14 今日头条产品 16K*18 头条PM整个Package接近300K/年 美团产品Offer 14K*16 base上海 百度产品研究生 11.5K*14.6 base 上海 京东产品17K*13 百度产品 220K/年 网易 产品培训生 硕士 15K*18 SP base杭州 不知名互联网公司校招PM 12K*15 base北京 技术岗 微软 软件工程师 本科 260K/年 蚂蚁金服算法工程师 20K*16 拼多多开发本科400K/年 商汤科技本科技术岗 14K/月 税前 海康威视研究院 算法工程师 220K/年 微信算法岗 SP 360K/年 的package 今日头条 程序员 研究生 10K/月 base北京 滴滴程序员 16K*16 亚马逊 小四年经验 研发 50K/月 Facebook应届毕业生  软件开发工程师   打包 115k$/年（30%-40%税） base湾区 京东算法 普通Offer 234K/年 运营岗 滴滴北京运营岗 硕士 12K*15 奖金另算 网易游戏运营 150K/年 左右 网易运营 8K*13（奖金0~3个月） 网易新闻运营8K/月 腾讯游戏运营 本科6K/月 上海京东时尚本科8K/月 京东运营岗 11K/月 base北京亦庄总部 今日头条 渠道营销运营 6K/月（加房补） 网易考拉 活动运营 13K*16 OFO城市运营管培13K*14 爱范儿运营 8K/月 滴滴长三角某二线城市运营管培生 薪资 7.6K*13 +每个月40%绩效 货车帮 数据运营 12K/月 卡宾电商 管培 10K/月 含浮动绩效 曹操专车 运营管培生  加各种补贴税前5.4K/月  base杭州 京东金融海龟回来8K/月 北京蓝港互动...
阅读全文

产品随想 | 周刊 第125期：We pass the whole company

【全方位解读】Material You，安卓设计语言7年以来最大更新   https://www.woshipm.com/pd/4645358.html 背后在推动的那批设计师，来自Palm OS Packy McCormick, one man show   https://meridian.mercury.com/packy-mccormick-one-man-show 非常喜欢这类缓缓到来的叙述方式 SMS Activate   https://sms-activate.guru/cn 短信激活服务 中国历朝代视频讲解   https://www.historyline.online/ 交互非常赞的网站 "Mac mini Pro" enclosure for M4 Mac mini   https://makerworld.com/en/models/756063#profileId-704491 Mac Mini的酷炫外壳 嚴搏非   https://zh.wikipedia.org/zh-hk/严搏非?useskin=vector 季风图书创始人 FlClash   https://github.com/chen08209/FlClash A multi-platform proxy client based on ClashMeta,simple and easy to use, open-source and ad-free. GUI.for.Clash   https://github.com/GUI-for-Cores/GUI.for.Clash A GUI program developed by vue3 + wails. mihomo-party   https://github.com/mihomo-party-org/mihomo-party Another Mihomo GUI. Create a brand like Apple's by asking these simple questions   https://www.brandstrategysarah.com/blog/Apple-brand-strategy Invisib...
阅读全文

《Becoming Steve Jobs》Chapter 15 The Whole Widget

What the world did see was an effective and visionary leader at the height of his powers. These were complicated years for Apple, but Steve handled almost every challenge in exactly the manner he wanted. He had fallen into leadership at such a young age, but he was comfortable in that role now, and justifiably sure of his capacity to guide Apple’s tens of thousands of employees to the goals he set for them. During these years, he would ensure the company’s continued success in personal computers by engineering a deft switch to a new kind of microprocessor; ruthlessly and successfully managing some major transitions in his executive team; and optimizing and building upon the efficiency and ambition of the company’s product development “treadmill,” as Tim Cook describes it. This is also when he delivered what is likely to be remembered as the most notable product of his life, the iPhone, and then improved even that by pivoting once again into a strategy he personally had not wanted to pu...
阅读全文

产品随想 | 周刊 第117期：He saw the intersection of art and science and business and built an organization to reflect that.

He disliked biography attempts. “I regard my scientific papers as my essential biography,’’ Land said. “I pour my whole life into the scientific project I’m investigating. I leave behind the things I’ve done in the past to do the work in the present.’’ “The purpose of inventing instant photography was essentially aesthetic,’’ Land said in 1947, announcing the process’s invention. “We live in a world changing so rapidly that what we mean frequently by common sense is doing the thing that would have been right last year.” — Edwin Land, Statement to Polaroid Corporation employees (25 June 1958) The worldview he was describing perfectly echoed Land’s: “Market research is what you do when your product isn’t any good.” And his sense of innovation: “Every significant invention,” Land once said, “must be startling, unexpected, and must come into a world that is not prepared for it. If the world were prepared for it, it would not be much of an invention.” Thirty years later, when a reporter ask...
阅读全文