Setting up webmasters ftp account

[pjviitas]

Got out of hand cutting and pasting...corrected version:

DISABLING IPTABLES
/sbin/chkconfig iptables off
/sbin/service iptables stop

DISABLING SELINUX
Set the following in the /etc/selinux/conf file:
SELINUX=disabled

ENABLING HTTPD
/sbin/chkconfig httpd on
/sbin/service httpd start

ENABLING FTP
/sbin/chkconfig vsftpd on
/sbin/service vsftpd start

CREATE WEBMASTER USER/GROUP
useradd webmaster
passwd webmaster

CHROOT WEBMASTER
Uncomment the following from the /etc/vsftpd/vsftpd.conf file:
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list

Create /etc/vsftpd/chroot_list file and add the following:
webmaster

RESTART FTP
/sbin/service vsftpd restart

MOVE HTML DIRECTORY OUT OF THE WAY
mv /var/www/html /var/www/html.original

CREATE A SYMBOLIC LINK BETWEEN THE HTML AND WEBMASTERS DIRECTORY
cd /var/www
ln -s /home/webmaster html

[pdb]

I hope you aren't planning to run with the firewall off all the time....

[pjviitas]

I have never had problems running boxes behind a hardware firewall so far and I would never recommend anyone connecting any computer directly to the internet.

Actually, security is not my thing at all...I will listen though.

Best Regards, Hedgehog

[strikeforce]

I think the essence was that most of us thought you were not going to have a firewall up and all We were just concerned for your security.

[pdb]

I guess I would put the firewall up anyway, even though it is on a "safe" network. You never know when the next big Linux virus is going to come along, if it does get in, bam, down they all go....

Hey, it could happen!