Ä¿ÇÇÇâÀÌ ³ª´Â *NIX
Ä¿ÇǴнº
½Ã½ºÅÛ/³×Æ®¿÷/º¸¾ÈÀ» ´Ù·ç´Â °÷
*
HanIRCÀÇ #coffeenix ¹æ
[
Àåºñ ¹× ȸ¼± ÈÄ¿ø
]
> Forum <
IT ÀÏÁ¤
N
e
w
!
ÀÚµ¿È ÇÁ·ÎÁ§Æ®
HOME
>
³×Æ®¿öÅ©(network)
>
FTP ¼¹ö / rsync / ¹Ì·¯¸µ / CVSup
µµ¿ò¸»
°Ë»ö :
»çÀÌÆ®
WHOIS
À¥¼¹ö Á¾·ù
FreeBSD¿¡¼ FTP ¼³Á¤¿¡ ´ëÇØ (chroot, log)
ÀÛ¼ºÀÏ : 2005/08/02 22:33
±Û¾´ÀÌ : ÁÁÀºÁøÈ£ (
http://coffeenix.net/
)
Á¶È¸¼ö : 10451
[
ÀÌÀüȸé
/
¼öÁ¤
] ºñ¹Ð¹øÈ£ :
Á¦ ¸ñ : FreeBSD¿¡¼ FTP ¼³Á¤¿¡ ´ëÇØ (chroot, log)
ÀÛ¼ºÀÚ : ÁÁÀºÁøÈ£(truefeel,
http://coffeenix.net/
)
Á¤¸®ÀÏ : 2005.7.25(¿ù)
FreeBSD¿¡ ±âº»À¸·Î ¼³Ä¡µÇ´Â FTP ¼³Á¤¿¡ ´ëÇØ °£´ÜÈ÷ Á¤¸®Çغ¸¾Ò´Ù.
1. Ȩµð·ºÅ丮 ¸ø ¹þ¾î³ª°Ô chroot ¼³Á¤
/etc/ftpchroot ÆÄÀÏ¿¡ ÇÑÁÙ¿¡ ID Çϳª¾¿ ¶Ç´Â @±×·ì¸í ÇüÅ·ΠÀÛ¼ºÇÏ¸é µÈ´Ù.
¾Æ·¡ÀÇ ¿¹¸¦ »ìÆ캸ÀÚ.
truefeel
@wheel
coffeenix /home/download
truefeel ID¿Í wheel ±×·ìÀº FTP Á¢¼Ó½Ã Ȩµð·ºÅ丮¸¦ ¹þ¾î³ªÁö ¸øÇÑ´Ù.
coffeenix ID´Â ÁöÁ¤ÇÑ µð·ºÅ丮¸¦ FTP login µð·ºÅ丮·Î Á¦ÇÑÇÏ´Â °æ¿ìÀÌ´Ù.
Áï FTPÁ¢¼Ó½Ã¿¡ /home/download µð·ºÅ丮°¡ / µð·ºÅ丮°¡ µÈ´Ù.
Âü°í·Î proftpd¿Í vsftpd´Â ´ÙÀ½°ú °°Àº ¼³Á¤À¸·Î ¸ðµç »ç¿ëÀÚ°¡ Ȩµð·ºÅ丮¸¦ ¹þ¾î³ªÁö ¸øÇÏ°Ô
¼³Á¤ÇÒ ¼ö ÀÖ´Ù.
- proftpd (proftpd.conf) : DefaultRoot ~
- vsftpd (vsftpd.conf) : chroot_local_user=YES
2. Á¢¼Ó ¹× ÆÄÀÏ Àü¼Û ·Î±× ³²±â±â
1) inetd.conf¿¡ ¼³Á¤µÈ ±âº» ¼³Á¤À¸·Î´Â ·Î±ä°ú ·Î±×¾Æ¿ô¿¡ ´ëÇÑ Á¤º¸¸¸ ³²°Ô µÈ´Ù.
ÆÄÀÏÀü¼Û ·Î±×±îÁö Æ÷ÇÔÇÑ º¸´Ù ÀÚ¼¼ÇÑ ·Î±× ³²±â·Á¸é /etc/inetd.conf ¿¡¼
ftpd -l ´ë½Å ftpd -ll ·Î ¼öÁ¤ÇÑ´Ù. (-ll »ó¼¼·Î±×)
ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
2) ftpd µ¥¸ó¿¡ ÀÇÇÑ ·Î±×´Â syslog¸¦ ÅëÇؼ ³²±â¹Ç·Î /etc/syslog.conf ¼³Á¤ÀÌ ÇÊ¿äÇÏ´Ù.
# ftp log
ftp.* /var/log/xferlog
3) /var/log/xferlog ÆÄÀÏ »ý¼º
#
cd /var/log
#
touch xferlog
#
chmod 640 xferlog
4) syslogd µ¥¸ó°ú inetd µ¥¸óÀ» Àç½ÇÇàÇÑ´Ù.
#
killall -HUP syslogd inetd
5) xferlog ·Î±× ÆÄÀÏÀ» rotation Çغ¸ÀÚ.
ftp »ç¿ëÀÌ
¸¹Àº ¼¹ö´Â ³¯Â¥º°·Î rotation Çϵµ·Ï ÇÏ°í,
ÀûÀº ¼¹ö´Â ¿ë·®À¸·Î rotation Çϵµ·Ï ÇÏ°Ú´Ù.
/etc/newsyslog.conf ¿¡ ´ÙÀ½ ¼³Á¤À» Ãß°¡ÇÑ´Ù.
- ftp »ç¿ëÀÌ ¸¹Àº ¼¹ö
# ³¯Â¥·Î rotation, ¸ÅÀÏ 0½Ã¿¡ rotation. ÃÖ±Ù 10 °³ º¸°ü
/var/log/xferlog 640 10 * @T00 Z
- ftp »ç¿ëÀÌ ÀûÀº ¼¹ö
# ¿ë·®À¸·Î rotation, 200KB ´ÜÀ§ 10°³ º¸°ü
/var/log/xferlog 640 10 200 * Z
6) ³²°ÜÁø ·Î±×¸¦ »ìÆ캸ÀÚ.
¾î´À IP¿¡¼ ¾î´À ID·Î ·Î±äÇß´ÂÁö¿Í Àü¼ÛµÈ ÆÄÀÏ(get, put) ¸ñ·Ï, ¿ë·® µîÀ» ÆľÇÇÒ ¼ö ÀÖ´Ù.
±×·¯³ª µ¿½Ã¿¡ ¿©·¯ IP¿¡¼ FTP Á¢¼Ó½Ã ¾î´À IP¿¡¼ ÆÄÀÏÀ» Àü¼ÛÇÑ °ÍÀÎÁö´Â ftpdÀÇ PID
(¾Æ·¡¿¡¼´Â 86928, 87043)¸¦ º¸°í ÆľÇÇØ¾ß ÇÑ´Ù.
Jul 25 08:05:09 coffee ftpd[86928]: FTP LOGIN FROM 218.xxx.xxx.xxx as truefeel
Jul 25 08:05:25 coffee ftpd[86928]: put /public_html/devel/com/smsok.html = 1109 bytes
Jul 25 09:43:43 coffee ftpd[87043]: connection from 218.xxx.xxx.xxx (218.xxx.xxx.xxx)
Jul 25 09:43:43 coffee ftpd[87043]: FTP LOGIN FROM 218.xxx.xxx.xxx as truefeel
Jul 25 09:43:43 coffee ftpd[87043]: get /public_html/devel/main.html = 5214 bytes
Jul 25 09:43:44 coffee ftpd[87043]: get /public_html/devel/com/mem.html = 1882 bytes
Jul 25 09:43:44 coffee ftpd[87043]: get /public_html/devel/com/sms.html = 1754 bytes
Jul 25 09:43:44 coffee ftpd[87043]: get /public_html/devel/com/smsok.html = 1109 bytes
Jul 25 09:43:45 coffee ftpd[87043]: get /public_html/devel/com_memok.html = 8255 bytes
Jul 25 09:43:45 coffee ftpd[87043]: get /public_html/devel/com/memok.html = 1656 bytes
3. Âü°íÇÒ¸¸ÇÑ ÀÚ·á
* FreeBSD ftpd manpage
http://nixdoc.net/man-pages/FreeBSD/man8/ftpd.8.html
* FreeBSD¿¡¼ Anonymous FTP server
http://www.freebsddiary.org/ftp-anonymous.php
* vsftpd ¼³Ä¡¿Í ¿î¿µ (ÇÑ±Û·Î±× ÆÐÄ¡ Æ÷ÇÔ, ±Û ÁÁÀºÁøÈ£)
http://coffeenix.net/board_view.php?bd_code=89
* ProFTPD Ȩ
http://www.proftpd.org/
* vsftpd Ȩ
http://vsftpd.beasts.org/
Ä¿ÇǴнº Ä«Æä ÃÖ±Ù ±Û
[03/24]
Youtube òÁ
[03/20]
Re: ¿Â¶óÀΰÔÀÓÀÇ Á¾ÁÖ±¹ ´ëÇѹα¹
[03/20]
½ÇÁ¦
[03/18]
±¹°¡
[10/20]
Cross Compiler ±ò
[07/14]
SSL ¬¡¬°
[04/26]
Re: µµ½ºÈ¸é ¿ø°ÝÁ¶Á¾ ¿©ºÎ
[04/25]
µµ½ºÈ¸é ¿ø°ÝÁ¶Á¾ ¿©ºÎ
[10/30]
Cshell¿¡¼ ³¼ö ¼³Á¤
[10/23]
°øÇ×öµµÁÖ½Äȸ»ç SE ±¸ÀÎ Ëì
[01/26]
Re: wgetÀ¸·Î ´Ù¸¥¼¹ö¿¡ÀÖ´Â µð·ºÅ丮¸¦ °¡Á®¿À·Á°íÇÕ´Ï´Ù.
[01/25]
wgetÀ¸·Î ´Ù¸¥¼¹ö¿¡ÀÖ´Â µð·ºÅ丮¸¦ °¡Á®¿À·Á°íÇÕ´Ï´Ù.
[01/11]
ƯÁ¤ ¾Èµå·ÎÀ̵å WebView ¹öÀü¿¡¼ SSL ¹®Á¦ (WebView ¹ö±×)
[08/01]
DNS forwarder (Àü´ÞÀÚ) ¼¹ö¸¦ ÅëÇؼ Äõ¸®ÇÏ¸é ¿ª¹æÇâÀ» ¹Þ¾Æ¿ÀÁú ¸øÇÕ´Ï´Ù.
[05/16]
(ÁÖ)ÈÄÀÌÁî ½Ã½ºÅÛ¿£Áö´Ï¾î (°æ·ÂÀÚ) ¸ðÁý
N
e
w
! ÃÖ±Ù¿¡ µî·ÏÇÑ ÆäÀÌÁö
KiCad EDA Suite project (Free/Libre/Open-Source EDA Suite) (CAD)
¿ÀÇÂij½ºÄÉÀ̵å ijµå (OpenCASCADE CAD)
QCad for Windows --- GNU GPL (Free Software)
The Hello World Collection
IPMI¸¦ È°¿ëÇÑ ¸®´ª½º ¼¹ö°ü¸®
DNS ¼³Á¤ °Ë»ç
nagiosgraph ¼³Ä¡ ¹æ¹ý
Slony-I ¼³Ä¡ ¹æ¹ý (postgresql replication tool)
Qmail±â¹ÝÀÇ Anti spam ½Ã½ºÅÛ ±¸ÃàÇϱâ
clusterssh
[ ÇÔ²²ÇÏ´Â »çÀÌÆ® ]
¿î¿µÁø :
ÁÁÀºÁøÈ£(truefeel)
, ¾ß¼ö(yasu), ¹ü³ÃÀÌ, sCag
2003³â 8¿ù 4ÀÏ~