How to Set Up an FTP Server in Linux

FTP (File Transfer Protocol) is a standard network protocol used to transfer files between a client and a server. It’s often compared to other internet protocols like SMTP for emails or HTTP for websites. With an FTP server, you can easily upload or download files, making it essential for sharing large amounts of data over the internet or a private network.

In this guide, we’ll walk you through the process of setting up an FTP server for Linux, configuring user permissions, setting up a firewall, and securing the connection using SSL encryption. By the end, you’ll have a fully functional and secure FTP server ready to use.

What is an FTP Server, and How Does it Work?

An FTP server for Linux is a system that allows users to transfer files between a client (you) and the server. When you connect, you can either upload or download files. But how does the connection actually work?

There are two main connections established between the client and the FTP server for Linux:

Command Port (Port 21): This is where the client sends commands to the server.
Data Port: Used for the actual transfer of data.

There are two types of data transfer modes:

Active Mode: The client opens a port and waits for the server to connect and transfer the data. However, this mode is not always practical as firewalls often block connections initiated by the server.
Passive Mode: The server tells the client which port to use for data transfer, and the client initiates the connection. This solves most firewall issues, and it’s the default mode for most FTP clients.

Let’s dive into the step-by-step process of setting up an FTP server for Linux.

Step 1: Installing the FTP Server

There are several FTP server options available for Linux, such as ProFTPD and vsftpd. In this guide, we’ll be using vsftpd because of its reliability and security features.

Why choose vsftpd?

SSL/TLS integration for secure connections.
Ability to jail users in their home directory using the chroot feature.
Bandwidth limitations to control network usage.
Support for virtual users and IP configuration.
IPv6 compatibility.

To install vsftpd on your Linux server, run the following command:

sudo apt install vsftpd

Once installed, check if the service is active by typing:

sudo systemctl status vsftpd

If it’s not active, you can enable it right away:

sudo systemctl enable --now vsftpd

Now, you have your basic FTP server for Linux up and running.

Step 2: Configuring the Firewall

By default, FTP uses ports 20 for active mode, 21 for commands, and a range of ports for passive connections. You’ll need to open these ports in your firewall.

If you’re using ufw (Uncomplicated Firewall), open the necessary ports with these commands:

sudo ufw allow 20/tcp
sudo ufw allow 21/tcp
sudo ufw allow 990/tcp
sudo ufw allow 5000:10000/tcp

The passive mode range (5000-10000) ensures multiple clients can connect simultaneously. You’ll also open port 990, which is used for TLS encryption, something we’ll configure later to secure your FTP server for Linux.

Must Read: Top 100 Linux Commands Every Sysadmin Should Know

Step 3: Configuring Users for FTP Access

Whether you’re setting up an FTP server for Linux for personal use or for public access, you’ll need to create users with specific permissions. Let’s walk through both scenarios.

Public FTP Server: Create a user with restricted access to specific directories for clients to download files.
Private FTP Server: Your admin account should be able to upload files to any directory, while public users are limited to downloading files from certain directories.

Create a user account for FTP:

sudo adduser ftpuser

To secure your ftpuser, disable SSH access by editing the SSH configuration file:

sudo nano /etc/ssh/sshd_config

Add this line:

DenyUsers ftpuser

Restart the SSH service for the changes to take effect:

sudo systemctl restart sshd

Step 4: Creating an FTP Directory and Setting Permissions

Next, create the folder where FTP files will be stored and set the appropriate ownership. This ensures only authorized users can upload files to the server.

sudo mkdir /ftp
sudo chown adminuser /ft

With these steps, your FTP server for Linux is set up to handle file transfers securely.

Step 5: Configuring vsftpd for Secure FTP Transfers

To configure the FTP server for Linux settings, open the vsftpd configuration file:

sudo nano /etc/vsftpd.conf

Ensure the following lines are uncommented:

anonymous_enable=NO
local_enable=YES
write_enable=YES

For passive mode connections, specify the port range we opened earlier:

pasv_min_port=5000
pasv_max_port=10000

To lock users to the home directory (for security reasons), configure chroot:

chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list
allow_writeable_chroot=YES

This will lock non-admin users (like ftpuser) into their directory, preventing them from accessing the entire server.

Step 6: Securing Your FTP Server with SSL/TLS

To encrypt file transfers, it’s essential to use FTPS (FTP Secure). Let’s generate an SSL certificate for your FTP server for Linux.

Run the following command to generate a self-signed certificate:

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/private/vsftpd.pem

Then, edit the vsftpd configuration file again to enable SSL:

sudo nano /etc/vsftpd.conf

Update the following lines:

rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key_file=/etc/ssl/private/vsftpd.pem
ssl_enable=YES
force_local_data_ssl=YES
force_local_logins_ssl=YES

Restart vsftpd for the changes to take effect:

sudo systemctl restart vsftpd

Your FTP server for Linux is now fully encrypted, ensuring secure file transfers.

Step 7: Connecting to Your FTP Server

To connect to your FTP server for Linux, you’ll need an FTP client like FileZilla. Simply enter your server’s IP address, username, and password, and you’ll be connected.

Alternatively, you can use FTP commands in the terminal. Here are a few basic ones:

Command	Description
pwd	Prints the current working directory
cd	Changes the directory
get filename	Downloads the specified file
put filename	Uploads the specified file

These commands are handy for managing your FTP server for Linux directly from the terminal.

Get A Free 15-day Trial of the Zentyal Server

Conclusion

Setting up an FTP server for Linux is a straightforward process that provides you with full control over file transfers on your server. By following the steps in this guide, you’ve successfully set up an FTP server, configured user permissions, secured it with SSL encryption, and ensured firewall protection. Whether you’re sharing public files or managing private data, a secure and functional FTP server for Linux is essential for efficient file sharing.

If you’re looking for a streamlined, all-in-one Linux solution for your IT infrastructure, consider exploring Zentyal. Zentyal offers a powerful Linux server designed to simplify system management, including seamless integration of FTP servers, file sharing, and more. Perfect for both small and medium businesses, Zentyal ensures secure, reliable, and easy-to-manage services.

Give it a try and enjoy secure, hassle-free file transfers!