Securing and Optimizing Linux: RedHat Edition -A Hands on Guide
PrevChapter 32. Linux FTP ServerNext

32.7. Configure the /etc/logrotate.d/ftpd file

Configure your /etc/logrotate.d/ftpd file to automatically rotate your log files each week by creating the /etc/logrotate.d/ftpd file and add the following lines: 

          /var/log/xferlog {
          # ftpd doesn't handle SIGHUP properly
          nocompress
          }

32.7.1. Configure ftpd to use tcp-wrappers inetd

Tcp-wrappers should be enabled to start and stop the ftpd server. Upon execution, inetd reads its configuration information from a configuration file which, by default, is /etc/inetd.conf. There must be an entry for each field of the configuration file, with entries for each field separated by a tab or a space.

Edit the inetd.conf file, vi /etc/inetd.conf and add or verify the existence of the following line: 

        ftp     stream  tcp     nowait  root    /usr/sbin/tcpd  in.ftpd -l -a
Update your inetd.conf file by sending a SIGHUP signal, killall -HUP inetd, after adding the above line in the file. 

        [root@deep ] /# killall -HUP inetd

Edit the hosts.allow file, vi /etc/hosts.allow and add, for example, the following line: 

        in.ftpd: 192.168.1.4 win.openna.com
Which means client IP 192.168.1.4 with host name win.openna.com is allowed to FTP on to the server.

PrevHomeNext
Configure the /etc/ftpconversions fileUpFTP Administrative Tools