INSTALL & KONFIGURASI FTP

1. Install paket vsftpd

root@www:~# aptitude -y install vsftpd

2. Edit fi le conf

root@www:~# vi /etc/vsftpd.conf

# line 23: Ubah( disable anonymous )

anonymous_enable=NO

# line 26: hilangkan tagar

local_enable=YES

# line 29: hilangkan tagar

write_enable=YES

# line 97,98: hilangkan tagar ( menerima transfer mode ascii)

ascii_upload_enable=YES
ascii_download_enable=YES

# line 120: hilangkan tagar ( aktifkan chroot )

chroot_local_user=YES

# line 121: hilangkan tagar ( aktifkan chroot list )

chroot_list_enable=YES

# line 123: hilangkan tagar ( defenisikan chroot list )

chroot_list_fi le=/etc/vsftpd.chroot_list

# line 129: hilangkan tagar

ls_recurse_enable=YES

# pada baris akhir

# tentukan direktori root( jika tidak maka users home directory
yang menjadi FTP home directory)
local_root=public_html

# tambahkan users yang dibolehkan untuk transfer fi le

root@www:~# vi /etc/vsftpd.chroot_list
wheezy
#restart service ftpd
root@www:~# /etc/init.d/vsftpd restart

3. Restart service FTPD

Stopping FTP server: vsftpd.
Starting FTP server: vsftpd.

4.Konfigurasi SSL
#aktifkan direktori ssl private
root@www:~#cd /etc/ssl/private

#meminta (request) kunci baru sebagai kunci private dari server

root@www:/etc/ssl/private# openssl req -x509 -nodes -newkey
rsa:1024 -keyout /etc/ssl/private/vsftpd.pem -out
/etc/ssl/private/vsftpd.pem

Generating a 1024 bit RSA private key

......++++++
.......++++++
writing new private key to '/etc/ssl/private/vsftpd.pem'
-----
You are about to be asked to enter information that will be
incorporated
into your certifi cate request.
What you are about to enter is what is called a Distinguished
Name or a DN.
There are quite a few fi elds but you can leave some blank
For some fi elds there will be a default value,
If you enter '.', the fi eld will be left blank.
-----
Country Name (2 letter code) [AU]: id # country

State or Province Name (full name) [Some-State]: southsulawesi

# state

Locality Name (eg, city) []: bantaeng # city

Organization Name (eg, company) [Internet Widgits Pty Ltd]:

SMKN1 Bantaeng # company

Organizational Unit Name (eg, section) []: SMKN 1 Bantaeng

# department
Common Name (eg, YOUR name) []:www.smkn1bantaeng.com
# server's FQDN

Email Address []:admin@smkn1bantaeng.com # email address

root@www:/etc/ssl/private# chmod 400 vsftpd.pem

5. Edit fi le vsftpd.conf
root@www:/etc/ssl/private# vi /etc/vsftpd.conf

rsa_cert_fi le=/etc/ssl/private/vsftpd.pem
tambahkan di bagian akhir
ssl_enable=YES # enable SSL
force_local_data_ssl=YES # require SSL connection
force_local_logins_ssl=YES # require SSL connection