ProFTPd

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 21:16, 21 December 2008 (edit)
Moreins (Talk | contribs)
(Configure proftpd)
← Previous diff
Revision as of 10:24, 16 February 2009 (edit) (undo)
Alvin (Talk | contribs)
m (Made built-in ProFTPd section for Mega and Mini_usb_ftp)
Next diff →
Line 1: Line 1:
-by [[User:mcpat | mcpat]], adapted by [[User:MeisterEder | MeisterEder]]+by [[User:mcpat | mcpat]], adapted by [[User:MeisterEder | MeisterEder]] & [[User:Alvin | MrAlvin]]
 +== ProFTPd included in web-GUI ==
 +As of version v24TNG - Eko svn11218 - Dec 17, 2008 (recommended version is [http://www.dd-wrt.com/dd-wrtv2/down.php?path=downloads%2Fothers%2Feko%2FV24_TNG%2Fsvn11296/ svn11296]) Mega and Mini_usb_ftp versions have built-in FTP server option.
 + 
 +In latest firmwares with ProFTPd embedded, go to the WEB GUI, and under SERVICES>NAS, you can configure your ftp server this way:[[Image:Ftp_pass_189.jpg]]
 + 
 +In the web-GUI select:
 +: tab: Services -> tab: NAS -> section: ProFTPD ->
 +* option: ProFTPD = enable
 +* option: Server Port - 21 - is recommended
 +* option: Files Directory - can be any rw-able drive space
 +* option: Allow Write - enable - is needed if you want to be able to FTP-''write'' to the drive
 +* option: User Password List -> any ''name'' [space] ''password'' can be entered
 +:* Name and password must be seperated by a space.
 +:* You should enter at least one ''user name'' and ''password'',
 +:: so you do not need to use the "root-user" to get FTP access.
 +: Click "Save" and "Apply Settings"
 +And you should now have FTP LAN access to your data drive
 + 
 +==== FTP Option - allow WAN FTP access ====
 +To allow WAN access using FTP protocol run the following line in a terminal window:
 + /usr/sbin/iptables -I INPUT 1 -p tcp --dport 21 -j logaccept
 +Note: FTP is a clear text protocol, so your FTP username and password can be sniffed, so you should think twice before enabling WAN FTP access.
 + 
 +==== FTP Option - allow anonymous FTP access to all or part of the data drive====
 +You can allow anyone on your LAN to ''read'' all or a specific folder-tree on your data drive. If you enable WAN access, the anonymous settings will also apply to all WAN users ( = all of the internet users )
 +*option: Anonymous Login (Read-only)
 +::Can be enabled if you want anyone to be able to ''read'' files on your data drive.
 +* option: Anonymous Home Sub-directory
 +:: Can be set to a sub-folder where you keep your public files and folders, like: /mnt/public - so your private and public files and folders can be kept seperate.
 +:'''Anonymous example'''
 +: You must create the public folder in a terminal or using the normal FTP user.
 + cd /mnt
 + mkdir public
 +: In Anonymous Home Sub-directory text field write: '''/public'''
 +: Click "Save" and "Apply Settings"
 + 
 + 
 +== Optware ProFTPd versions ==
====Preface==== ====Preface====
To run a ftp-server you need appropriate free space on your device. So its best you have sd-card-modded your device (or you can connect an HD). To run a ftp-server you need appropriate free space on your device. So its best you have sd-card-modded your device (or you can connect an HD).
Line 44: Line 82:
If you dont want to allow anonymous access delete the entire "<Anonymous>" section! If you dont want to allow anonymous access delete the entire "<Anonymous>" section!
-In latest firmwares with ProFTPd embedded, go to the WEB GUI, and under SERVICES>NAS, you can configure your ftp server this way:[[Image:Ftp_pass_189.jpg]]+ 
====Start the xinet-superserver==== ====Start the xinet-superserver====

Revision as of 10:24, 16 February 2009

by mcpat, adapted by MeisterEder & MrAlvin

Contents

ProFTPd included in web-GUI

As of version v24TNG - Eko svn11218 - Dec 17, 2008 (recommended version is svn11296) Mega and Mini_usb_ftp versions have built-in FTP server option.

In latest firmwares with ProFTPd embedded, go to the WEB GUI, and under SERVICES>NAS, you can configure your ftp server this way:Image:Ftp_pass_189.jpg

In the web-GUI select:

tab: Services -> tab: NAS -> section: ProFTPD ->
  • option: ProFTPD = enable
  • option: Server Port - 21 - is recommended
  • option: Files Directory - can be any rw-able drive space
  • option: Allow Write - enable - is needed if you want to be able to FTP-write to the drive
  • option: User Password List -> any name [space] password can be entered
  • Name and password must be seperated by a space.
  • You should enter at least one user name and password,
so you do not need to use the "root-user" to get FTP access.
Click "Save" and "Apply Settings"

And you should now have FTP LAN access to your data drive

FTP Option - allow WAN FTP access

To allow WAN access using FTP protocol run the following line in a terminal window:

/usr/sbin/iptables -I INPUT 1 -p tcp --dport 21 -j logaccept 

Note: FTP is a clear text protocol, so your FTP username and password can be sniffed, so you should think twice before enabling WAN FTP access.

FTP Option - allow anonymous FTP access to all or part of the data drive

You can allow anyone on your LAN to read all or a specific folder-tree on your data drive. If you enable WAN access, the anonymous settings will also apply to all WAN users ( = all of the internet users )

  • option: Anonymous Login (Read-only)
Can be enabled if you want anyone to be able to read files on your data drive.
  • option: Anonymous Home Sub-directory
Can be set to a sub-folder where you keep your public files and folders, like: /mnt/public - so your private and public files and folders can be kept seperate.
Anonymous example
You must create the public folder in a terminal or using the normal FTP user.
cd /mnt
mkdir public
In Anonymous Home Sub-directory text field write: /public
Click "Save" and "Apply Settings"


Optware ProFTPd versions

Preface

To run a ftp-server you need appropriate free space on your device. So its best you have sd-card-modded your device (or you can connect an HD). This tutorial points on an installed sd-card mounted to "/mmc". It is also possible to replace every occurances of (/mmc) with (/jffs) if you have it enabled.

First: install optware

If you dont have installed this wonderful system, so do it now! It easy and descriped in Optware (up to 2.2).

Install xinetd

Xinetd is a so called super-server. It receives requests on configurable ports and then starts an appropriate serverprocess. In our case xinetd should manage the ftp-requests and start proftpd. So install xinetd:

/opt/bin/ipkg update xinetd
/opt/bin/ipkg install xinetd

Install proftpd

Also install the proftpd-server:

/opt/bin/ipkg install proftpd

Because of the good work of the optware-people there is only a little bit configuration to do:

Configure xinetd

In default-configuration xinet only listens to requests from network 192.168.1.0/24 If your network does not meet this netmask you have to change the value:

Open the file /opt/etc/xinetd.conf with you favorite editor (maybe "nano")

nano opt/etc/xinetd.conf

Change the value for "only_from" to your netmask (something like 192.168.4.0/24?) To allow request from everywhere you can comment this line out (note "#" at beginning of the line)

Configure proftpd

Open the file /opt/etc/proftpd.conf with you favorite editor (maybe "nano")

nano opt/etc/proftpd.conf

We have to change some values for meeting the standards of dd-wrt: Replace the lines:

User                            nobody
Group                          nobody

with

User                            root
Group                          root

Also you can change the "DefaultRoot" to "/mmc" if you want.

If you dont want to allow anonymous access delete the entire "<Anonymous>" section!


Start the xinet-superserver

/opt/etc/init.d/S10xinetd start

Test the service

Connect with your favorite ftp-client to the new server. Login with your wrt-"root"-Login (or another existing user) Maybe the login takes a while - the proftpd-server have to start for every connect!