Pure-FTPD + pureadmin (Ftp server with gui)

Pure-FTPD + pureadmin (Ftp server with gui)

Install ''Pure-FTPD'' with GUI

    Install the pure-ftpd package and the pureadmin package from the Universe Repository.

    sudo apt-get install pure-ftpd pureadmin

    Then create the user group.

    sudo groupadd ftpgroup

    and

    sudo useradd -g ftpgroup -d /dev/null -s /etc ftpuser

    in the terminal.

    Next create your ftpuser directory

    sudo mkdir /home/ftpusers

    Then to create a user directory for joe

    sudo mkdir /home/ftpusers/joe

    (you can create a directory for each ftp user)

    Then to add user joe

    sudo pure-pw useradd joe -u ftpuser -d /home/ftpusers/joe

    Then to create you user database

    sudo pure-pw mkdb

    Then

    sudo ln -s /etc/pure-ftpd/pureftpd.passwd /etc/pureftpd.passwd

    and

    sudo ln -s /etc/pure-ftpd/pureftpd.pdb /etc/pureftpd.pdb

    and

    sudo ln -s /etc/pure-ftpd/conf/PureDB /etc/pure-ftpd/auth/PureDB

    which will create symbolic links between the respective files.

    Next you need to modify the permissions of /home/ftpusers directory and of any other subdirectories. The owner must be ftpuser while Group must be ftpgroup

    sudo chown -hR ftpuser:ftpgroup /home/ftpusers/

    After doing that open up pureadmin in the terminal.

    gksudo pureadmin

    and stop firestarter if it is installed.

NOTES

    The user joe is used as an example, you can change user joe and/or add or remove other users through pureadmin.

You may need to restart PureFTPD before changes take effect.

sudo /etc/init.d/pure-ftpd restart


SECURITY

    FTP is by nature a rather unsecure protocol. Add TLS support to prevent your sessions from being vulnerable to man-in-the-middle-attacks

    sudo apt-get install openssl

    Enable TLS only mode in Pure-FTPd

    sudo echo 2 > /etc/pure-ftpd/conf/TLS

    or for a less secure version that also accepts insecure FTP connections

    sudo echo 1 > /etc/pure-ftpd/conf/TLS

    Make a private SSL key

    sudo mkdir -p /etc/ssl/private/

    Create your key

    sudo openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

    SSL certificates are inherently insecure if other users can read them. You must secure the certificate before it can be used by changing file permissions.

    sudo chmod 600 /etc/ssl/private/pure-ftpd.pem

    And now you need to restart Pure-FTPd

    /etc/init.d/pure-ftpd restart

AMAZON AWS SETTINGS

    If installing on an AWS server, you will need to configure IP address routing information specific to your server. If using the default UBUNTU server, use the following. Note that echo will not properly be able to edit a file unless you are in a sudo shell, which is why we use "sudo bash -c".

    cd /etc/pure-ftpd/conf
    sudo bash -c 'echo "35000 36000" > PassivePortRange'
    sudo bash -c 'echo "YOURIPHERE" > ForcePassiveIP'
    sudo bash -c 'echo "yes" > DontResolve'

    These commands will allow most programs, like FileZilla, to connect via FTP passive mode to the server. Amazon AWS servers use internal IP addresses starting with "10." for most things, and you will need to explicitly define this IP address for your FTP software to be able to communicate.

    Update your Amazon AWS Firewall settings.

    "Custom TCP Range" 35000 36000
    "Custom TCP Range" 21