vsftp daemon

• Introduction
• Configuring vsftpd
• General Configuration Options
• Controlling Access to FTP
• Configuring Host Access
• Configuring a Virtual FTP Server
• Running vsftpd via Xinetd

Introduction

The File Transfer Protocol (FTP) has existed for the Internet since around 1971. Remarkably, the protocol has undergone very little change since then. Clients and servers, on the other hand, have been almost constantly improved and refined. There are a number of good FTP clients installed with your Red Hat system, ranging from the original ftp, to the more advanced command-line client lftp, to the graphical clients like gftp. If you’ve worked with FTP servers on UNIX before, you might be a bit surprised to find that your Red Hat installation doesn’t use the Washington University FTP daemon (wu-ftpd) by default, but instead includes the Very Secure FTP daemon (vsftpd).

There are multiple security and troubleshooting issues that make writing a good FTP daemon a pretty challenging programming task. Especially tricky are troubleshooting issues that don’t clearly manifest themselves as FTP related. (“Is it the network, or is it FTP?”).

Red Hat uses the vsftpd  server by default, while Suse uses pure-ftpd.

The “vs” stands for “very secure,” but as the authors of the program point out, that is a design goal and not a guarantee. One distinct advantage is that vsftpd is compiled with TCP wrappers so you can use TCP Wrappers controls even if you run it as a standalone daemon and not via xinetd. This standalone mode is  actually default installation mode in Red Hat. 

In part because of its lightweight design, vsftpd  has also proven itself to be stable and scalable under heavy usage. The servers behind ftp.redhat.com have withstood 15,000 concurrent connections across their server pool using vsftpd, with individual servers handling more than 2,500 concurrent downloads.

Several security-conscious organizations, such as the SANS (SysAdmin, Audit, Network, Security) Institute and IBM, are also recommending vsftp. In addition, there is at least anecdotal evidence that it is noticeably faster than wu-ftpd.

Caution:  Like most other services, vsftpd is only as secure as you make it. The authors of the program have provided all of the necessary tools to make your site secure, but a bad configuration can cause your site to become open. Remember to double-check your configuration and test it out before going live. FTP servers are a popular target for attackers, so keeping up on the latest bug fixes and patches for public servers is critical.

When an FTP client wants to connect to an FTP server, it takes two random high ports (a port number greater than 1024)—one for a “control” connection and one for a “data” connection. It then initiates a connection from the port it chose as “control” to port number 21 on the server. (Port 21 is the ubiquitous FTP server port defined in the FTP standard, so that’s where the server daemon will listen for new connections.) As part of the initial negotiation, the client also tells the server which other high port the client has selected. Once the connection is established, the client can log in and issue commands to go through the FTP server’s directories.

When the client makes a request to transfer a file, the server initiates a connection from its own port number 20 to the port on the client that was specified earlier. The original connection is left open so that the client and server can send additional “out of band” messages to each other (to abort the transfer, for example).

This design, conceived in the early 1970s, assumed something that was reasonable to assume for a long period of time on the Internet: Internet users are a friendly bunch. This was indirectly protected by the fact that the National Science Foundation (NSF) funded the Internet backbone, and therefore no commercial organizations were allowed on to it unless they were working in conjunction with a research institute. Academic- and government-funded research labs made up most of the users.

Around 1990–1991, the NSF stopped footing the bill for the Internet backbone, and the Internet went commercial. At first, it wasn’t a big deal. Then the World Wide Web came along and the Net’s population exploded—along with its security problems.

Many sites have now taken to using firewalls to protect their internal networks from the Big Bad Internet. Firewalls, however, consider arbitrary connections from high ports on the Internet to high ports on the internal network to be a very bad thing (and rightfully so). As a result, many firewalls implement application-level proxies for FTP that keep track of FTP requests and open up those high ports when needed to receive data from a remote site.

Of course, not all firewalls are that smart. Many sites rely on packet-filtering firewalls, which don’t really understand the data going through them but know that data being sent to arbitrary high ports is bad and thus bounces them out. This type of firewall promptly breaks FTP, because FTP relies on being able to open a connection back with the client on a high port. A typical symptom of this behavior occurring is that when a client appears to be able to connect to the server without a problem, the connection seems to hang whenever an attempt to transfer data occurs.

Now think back to when FTP was originally created and bandwidth was at a premium. When someone wanted to get a file transferred from host A to host B while sitting at host C, the process of transferring the file from host A to C and then from C to B would waste an incredible amount of bandwidth. So the designers of the FTP protocol came up with a solution: make it possible for someone sitting on host C to transfer a file from host A to host B directly. This was done via a passive transfer.

Passive transfers are accomplished by having the client side, rather than the server side, initiate the connection for data transfer, as shown in Figure 12-2. In the three-machine scenario, one of the servers is put into passive mode, and the other is left in normal mode. The normal-mode machine can then initiate a data connection to the passive-mode machine, as shown in Figure 12-3. This sort of thing doesn’t happen too often in the real world anymore, but passive mode still exists, and we can use it for other purposes. For example, passive mode can also be used between just two machines. From the standpoint of firewalls, this allows the client to remain securely behind a firewall without the need for complex rules for allowing connections back in.

Configuring vsftpd

The vsftp  server doesn’t have quite as many configuration options as some of its competitors, focusing instead on doing the basics well. It should be sufficient for most FTP needs, and much of what’s missing can be considered “frills” or can be accomplished in other ways.

The vsftpd  package comes with a sample configuration file. There is one gotcha related to the default /etc/vsftpd/vsftpd.conf file connected with the fact tha anonymous ftp is enabled by default. If you enable ability to write (change write_enable=NO to YES, and do not disable it you are creating a security hole):

Your default conf file should look something similar to the following.

# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=YES
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=NO
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#anon_mkdir_write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# The target log file can be vsftpd_log_file or xferlog_file.
# This depends on setting xferlog_std_format parameter
xferlog_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using "root" for uploaded files is not
# recommended!
#chown_uploads=YES
#chown_username=whoever
#
# The name of log file when xferlog_enable=YES and xferlog_std_format=YES
# WARNING - changing this filename affects /etc/logrotate.d/vsftpd.log
#xferlog_file=/var/log/xferlog
#
# Switches between logging into vsftpd_log_file and xferlog_file files.
# NO writes to vsftpd_log_file, YES to xferlog_file
xferlog_std_format=YES
#
# You may change the default value for timing out an idle session.
#idle_session_timeout=600
#
# You may change the default value for timing out a data connection.
#data_connection_timeout=120
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftpsecure
#
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
#async_abor_enable=YES
#
# By default the server will pretend to allow ASCII mode but in fact ignore
# the request. Turn on the below options to have the server actually do ASCII
# mangling on files when in ASCII mode.
# Beware that on some FTP servers, ASCII support allows a denial of service
# attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd
# predicted this attack and has always been safe, reporting the size of the
# raw file.
# ASCII mangling is a horrible feature of the protocol.
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
# You may fully customise the login banner string:
#ftpd_banner=Welcome to blah FTP service.
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd/banned_emails
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd/chroot_list
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
# the presence of the "-R" option, so there is a strong case for enabling it.
#ls_recurse_enable=YES
#
# When "listen" directive is enabled, vsftpd runs in standalone mode and
# listens on IPv4 sockets. This directive cannot be used in conjunction
# with the listen_ipv6 directive.
listen=YES
#
# This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6
# sockets, you must run two copies of vsftpd whith two configuration files.
# Make sure, that one of the listen options is commented !!
#listen_ipv6=YES

pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES

The example file is fairly well commented, so you can probably figure out how to get the basics working just by reading through it. I will cover some of the most important features in the next few sections, including some not mentioned in the default config  file. You may want to refer back to this file as you read through the descriptions of the following options.

General Configuration Options

Before I cover the different access options available, you should familiarize yourself with some of the basic configuration choices. This section provides only a brief reference, but you can further explore topics that are relevant to your setup.

connect_from_port_20
This option determines whether the data connection uses port 20 (when operating in normal mode). It may come as some surprise that the default is “no.” The reason for this is part of vsftpd’s security model. By not requiring a low-number port, parts of the daemon can run in a less privileged mode. The tradeoff is that some clients have a security model that insists the connection come from port 20, so in our example file this option has been set to “yes.”

pasv_enable
This option enables the use of passive mode and defaults to “yes.” Disable it if, for some reason, you want to prevent passive mode from being used.

pasv_promiscuous
One of vsftpd’s security precautions involves making sure that in passive mode the data connection is coming from the same IP address as the control connection. Enabling this option would bypass that precaution. There may be a reason to do so if you’re planning on performing one of those three-way FTP sessions I mentioned at the beginning of this module, or if you’re using some form of secure tunneling scheme that it interferes with. Otherwise you should probably leave it disabled.

port_enable
This enables normal (nonpassive) mode connections. In this case port refers to the practice of the client passing along the port number it has chosen for the data connection. Turn this off if you want to allow only passive mode connections. The default is “yes.”

ftpd_banner
This gives you the option to change the message that’s displayed when you first connect to the server. Unlike some other ftpd  servers, vsftpd  has you add your new message right here in the config  file. Including your software’s name and version number here is considered by some to be a security risk and is not advised. There is currently a one-line limit on the banner message.

dirmessage_enable
Enabling this means that when users change into a new directory, they’ll be shown the contents of a text file (.message  by default) if it exists. This is useful for providing per-directory information to users. This has been enabled in the example file. If you want to display a different file than .message, look at the message_file  option.

write_enable
Just as you might expect, this enables writing operations in the ftp  directories. This is necessary if you’re going to allow uploads of any kind. There are, of course, security implications of doing this, and it’s suggested that you leave this turned off unless you really need it.

xferlog_enable
Logging is your best asset as an administrator. This option will record all transfers to the log file. Note that vsftpd  doesn’t use syslog. This is enabled in the example configuration.

xferlog_std_format
This will toggle between a “standard” format used by some other ftp  servers, notably wu-ftp, and vsftpd’s own format. The default is “no,” but the example configuration changes this to “yes” to take advantage of existing log parsers that may be aware of the standard format.

xferlog_file
If you need to change where the log file is written, this is the option you’re looking for. The default is /var/log/vsftpd.log.

pam_service_name
This is the string that pam  will use as the service name when authenticating. The default is ftp, but this has been changed to vsftp  in the example file to be less ambiguous. For more information on pam, see Module 10.

Controlling Access to FTP

Being able to control who may and who may not enter your FTP server is a crucial aspect of server management. You may want to allow users with an account on the box to log in as themselves. You may want to allow only anonymous, password-less logins. Perhaps you want both. There are options to control whether new files can be uploaded or only downloads can be performed. You can even limit actions based on certain lists of users.

Anonymous Access

Under the UNIX model, every process must have an owner. In the case of an anonymous FTP user, this owner should have minimal file access rights and only be able to see the files in the designated public FTP area. Even though this setup is taken care of by the anonftp  package under Red Hat, it’s still something to keep in mind when deciding which options and permissions to set. Also keep in mind that so-called anonymous access still requests a username and password, but the server recognizes the username of anonymous  or ftp  as being special and will accept any password for them. Customarily, the users e-mail address is requested as the password on anonymous access, but no real validation is performed.

Q: How can we ensure that anonymous users enter their real e-mail addresses?

A: You cannot ensure that anonymous users enter their real e-mail addresses because FTP only provides authentication for users with accounts. Anonymous users can be truly anonymous. If you need gated access for users who do not have real accounts, you will probably need to use something fancier than FTP.

anonymous_enable

This is obviously the most important of the options related to an anonymous setup. The default for this option is “yes,” so you really only have to worry about it if you want to disable anonymous access.

anon_world_readable_only

This option defaults to “yes” under the assumption that from time to time the anonymous FTP user may own files that you don’t want the world to have access to. When enabled, anonymous users will only be allowed to download files that are world readable. Change the value to “no” if you want to allow downloading of all files readable by the FTP user.

anon_upload_enable
This is set to “no” by default. If you change this to “yes” and also have the write_enable  option set, anonymous users will be able to upload files. The anonymous FTP user must still have write permissions in the desired location.

anon_mkdir_write_enable
This will allow anonymous users to create new directories if the write_enable  option is also on. The anonymous FTP user must have write permissions in the parent directory. The default is “no.”

anon_other_write_enable
This controls deleting and renaming of files by anonymous users. You probably don’t want to change this from its default value of “no.”

chown_uploads
This option will allow you to have all anonymous uploads automatically changed to be owned by a certain user. This can be useful for security.

chown_username
This is the user to whom files are chown’d to if you enabled the previous option. The default is root, so you may want to change that to a dedicated user.

Authenticated User Access

Here’s where we get into the issue of allowing users with accounts on the server to login as themselves. The lack of general security in the FTP protocol means that the server usually tries to compensate with features like user id remapping and chroot’d jails. This makes configurations potentially trickier than you might expect.

local_enable
This is the primary option to allow logins from people with local accounts. You have to change this to “yes” to make most of the following options relevant.

guest_enable
This will remap all nonanonymous logins to a specified “guest” user account. This can be a useful security option for some configurations.

guest_username
This is the username to map as guest  if you enable the previous option. The default is ftp.

userlist_enable
Turn this option to “yes” if you want to limit who can login based on a list in a file. You can either allow only those names listed, or you can deny those listed, depending on the following option.

userlist_deny
This option is only consulted if the previous option is enabled. It defaults to “yes,” which will deny user accounts that are listed in the file. Changing this option to “no” reverses the meaning of the list so that only those listed can login.

userlist_file
And this option specifies the file referred to by the preceding two options. The default is /etc/vsftpd.user_list. It is instructive to at least examine the accounts that Red Hat has listed here by default.

Configuring Host Access

Some FTP daemons provide direct support for blocking certain hosts. In vsftpd this function is delegated to TCP Wrappers

The latter use two files:  hosts.allow  and hosts.deny.  Details can be found at /etc/hosts.allow and /etc/hosts.deny An example configuration might be

	/etc/hosts.allow
	vsftpd: LOCAL 10.1.42.0/24 *.my.domain.com

	/etc/hosts.deny
	vsftpd: ALL	

If you run vsftpd via xinetd (this is not a default configuration in RHEL -- in RHEL it is run as a standalone daemon), you can also adjust the settings in xinetd.conf.

Configuring a Virtual FTP Server

Even though the FTP protocol doesn’t support name-based virtual servers the way the Hypertext Transfer Protocol (HTTP) does, you can still set up multiple FTP servers on the same host so long as each server has its own IP address. To distinguish between the different “servers,” we’ll be taking advantage of xinetd  once again. This section assumes that you have already configured an IP alias and fudged the Address Resolution Protocol (ARP) table correctly. (This is discussed later in this book in Part V, “Advanced Linux Networking”.) This quick jumpstart on the process assumes you have one Ethernet card and want to add a single virtual IP address:

1.Make sure your new IP address exists in both the local host table (/etc/hosts) and your DNS table. (In this example, we’ll call the host “earth.”)

2. Run the ifconfig  command to configure the eth0:0 device with the appropriate address, netmask, and broadcast. For example, to configure the 192.168.1.42 device on eth0:0, I would use the following command:

ifconfig eth0:0 192.168.1.42 netmask 255.255.255.0 broadcast 192.168.1.255

3.Fudge the ARP table. You will need your Ethernet card’s hardware address for this. Run the ifconfig  -a command to get this information. Assuming your Ethernet card’s hardware address is 00:10:4B:CB:15:9F, type the following command:

arp -s earth 00:10:4B:CB:15:9F 
				pub		

With your virtual IP address established, you now need to create a configuration similar to that of your main site. In this example, I’ll assume that you’ve put your new configuration file at /etc/vsftpd.earth.conf. You may decide to create a new directory structure for this or overlap with the existing configuration. We’re going to take advantage of two features to make this all work together. The first is the ability to pass vsftpd  the name of the config  file you want it to use on the command line. The second is the use of the bind  directive in xinetd.conf  to limit an instance to a specific IP address.

With a configuration similar to this, xinetd  will start vsftpd  with a different configuration file depending on which interface the connection comes in on. Don’t forget to restart xinetd  after you make changes to its configuration.

Ask the Expert

Q: Why do you need a separate IP address for each virtual server in FTP when you do not with some other protocols such as HTTP?

A: HTTP actually passes the uniform resource locator (URL) as part of your request. Domain names can be extracted from the URL, and the server can act on that information accordingly. The design of the FTP protocol does not support passing a URL to the server; thus the only method the server can use to determine where the original request was directed is based on the IP address the request arrives on.

Progress Check

Why is the default “no” when connecting from port 20?

How do you change the option where the log file is written?

Answers:  1. vsftp  has the default “no” as part of its security; by not requiring the low number port, parts of the daemon can run in a less-privileged mode.

2. You change the option where the log file is written using the xferlog_file  option.

Now that you’ve covered the basics, you should have no problem getting your FTP server up and running. This project will walk you through this process, but it should all seem like a simple review after working through the previous sections.

Step by Step

1.Set up xinetd  as described earlier. The easiest way to do this is just to edit the file /etc/xinetd.d/vsftpd  with your favorite text editor and set the disable directive to “no”.

2.Now point your editor at the config  file /etc/vsftpd.conf. Examine the default configuration settings and see if they apply to your situation. Pay special attention to anonymous_enable  and local_enable. Review the previous sections or the man page if you’re unsure about a particular option.

3.Examine the settings in /etc/hosts.allow  and /etc/hosts.deny  to make sure that they are appropriate for your setup.

4.Restart xinetd  by typing /etc/init.d/xinetd restart.

5.Test your server by trying to log in. The simplest way is to just type ftp localhost  on the command line and supply an appropriate username and password when prompted.

Mastery Check

1. How does a passive transfer differ from an active transfer?
2. How should you check to see if your FTP server is secure, and why is this important?
3. What are two different ways in which you can control who can access your server?
4. What is requested as a password for an anonymous login?
5. True or False? When a client makes a request to transfer a file and the data connection is initiated, the control connection closes immediately.
6. True or False? The pasv_enable  option enables the use of passive mode, and it defaults to “yes.”
7. What is FTP?
8. Why does RedHat choose to use vsftpd?
9. Where are the documentation files for vsftp?
10. What is the ftpd_banner option for configuring the ftp server?
11. Why is the anon_world_readable_only default set to "yes"?
12. What does setting the configuration option userlist_enable allow the server to do?
13. Where would you place the name of a host that you wanted to explicitly allow or deny access to?
14. Why is passive mode important?
15. Does vsftpd support virtual FTP servers?
16. Can vsftpd be run as a standalone daemon?

Running vsftpd via Xinetd

The xinetd  program, which acts as a kind of “superserver,” listening for network requests on behalf of many server applications and starting a server application once it detects a connection request for it. If its configuration file  gets changed, you need to send the xinetd  process a signal to tell it to reload its configuration file.

Now we need to tell xinetd  to reread all of its configuration files. The easiest way to do this is to run

service xinetd reload

or

/etc/init.d/xinetd reload

You can also force it to reread its configuration by sending it a SIGUSR1, as follows.

kill -SIGUSR1 `cat /var/run/xinetd.pid`

And you should now be able to ftp  to your own system.

NEWS CONTENTS

• 20200520 : How to set up an FTP Server on CentOS 8 using VSFTPD ( May 20, 2020 , vitux.com )
• 20130224 : PROFTPD vs VSFTPD ( May 15, 2010 , Web Hosting Talk )
• 20130224 : ProFtpd vs. VsFtpd ( July 15th, 2009 , Ubuntu Forums )
• 20130224 : Howto Easy FTP with vsftpd ( August 5, 2007 , Ubuntu Forums )
• 20130224 : VSFTPD... - openSUSE Forums ( VSFTPD... - openSUSE Forums, )

Old News ;-)

[May 20, 2020] How to set up an FTP Server on CentOS 8 using VSFTPD

May 20, 2020 | vitux.com

How to set up an FTP Server on CentOS 8 using VSFTPD What is FTP?

FTP (File Transfer Protocol) is a client-server network protocol that allows users to exchange files to and from remote computers.

FTP uses plain text to transfer data and access data. There are several different open-source FTP servers available for the Linux operating system platform. The most commonly used FTP servers are VSFTPD, ProFTPD and PureFTPD. The FTP protocol uses port number 21 for connection and port 20 for data transfer. In passive mode, additional ports are used.

In this tutorial, we will learn how to set up and configure VSFTPD. It is very secure and stable and available in the CentOS 8 package repository.

Install VSFTP FTP-Server

To install the VSFTPD package on CentOS 8, open up a terminal or connect to your server by SSH as root user and type in the following command:

# dnf install –y vsftpd

<img src="https://vitux.com/wp-content/uploads/word-image-9.png" alt="Installing VSFTPD" width="409" height="72" srcset="https://vitux.com/wp-content/uploads/word-image-9.png 409w, https://vitux.com/wp-content/uploads/word-image-9-300x53.png 300w" sizes="(max-width: 409px) 100vw, 409px" />

Once the package is installed, start and enable the VSFTPD service by using the following command:

# systemctl enable vsftpd
# systemctl start vsftpd

<img src="https://vitux.com/wp-content/uploads/word-image-10.png" alt="Enable FTP service" width="429" height="65" srcset="https://vitux.com/wp-content/uploads/word-image-10.png 429w, https://vitux.com/wp-content/uploads/word-image-10-300x45.png 300w" sizes="(max-width: 429px) 100vw, 429px" />

<img src="https://vitux.com/wp-content/uploads/word-image-11.png" alt="Start FTP service" width="403" height="63" srcset="https://vitux.com/wp-content/uploads/word-image-11.png 403w, https://vitux.com/wp-content/uploads/word-image-11-300x47.png 300w" sizes="(max-width: 403px) 100vw, 403px" />

Take a copy of original configuration file /etc/vsftpd/vsftpd.conf by typing the following command:

# cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf.bk

<img src="https://vitux.com/wp-content/uploads/word-image-12.png" alt="Make a backup copy of the original configuration file" width="666" height="64" srcset="https://vitux.com/wp-content/uploads/word-image-12.png 666w, https://vitux.com/wp-content/uploads/word-image-12-300x29.png 300w" sizes="(max-width: 666px) 100vw, 666px" />

Now edit the configuration file, by using the following command:

# vim /etc/vsftpd/vsftpd.conf

<img src="https://vitux.com/wp-content/uploads/word-image-13.png" alt="Edit the configuration file with vim" width="433" height="64" srcset="https://vitux.com/wp-content/uploads/word-image-13.png 433w, https://vitux.com/wp-content/uploads/word-image-13-300x44.png 300w" sizes="(max-width: 433px) 100vw, 433px" />

Find and set following directives therein:

anonymous_enable=NO # disable anonymous users(Unknown users)
local_enable=YES # allow local users
write_enable=YES # allow ftp write commands
local_umask=022 # set default umask
dirmessage_enable=YES # enable messages on change directory
xferlog_enable=YES # enable logging of uploads and downloads
connect_from_port_20=YES # ensure PORT transfer connections from port 20 xferlog_std_format=YES # keep standard log format
listen=NO # prevent vsftpd run in stand-alone mode
listen_ipv6=YES # allow vsftpd to listen on IPv6 socket
pam_service_name=vsftpd # set PAM Service name to vsftpd

Configure user list in FTP Server

By default, all the users that are in the user_list file located at /etc/vsftpd/user_list are allowed to use FTP services.

To restrict users in a chrooted environment , use the following directives:

chroot_local_user=YES # Create chrooted environment for users
allow_writeable_chroot=YES # Allow write permission to a user on chroot jail directory

To keep user restrict to their home directory, use the following directives:

userlist_enable=YES # enable vsftpd to load usernames
userlist_deny=NO # allow access to users in the user list

If you want to provide an overall access to our system add this directive into your configuration file:

chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list #users in this file list have an overall access

Save and close the configuration file.

Now, create a chroot_list under /etc/vsftpd/ directory, by using the following command:

# touch /etc/vsftpd/chroot_list

<img src="https://vitux.com/wp-content/uploads/word-image-14.png" alt="Chroot FTP users" width="458" height="67" srcset="https://vitux.com/wp-content/uploads/word-image-14.png 458w, https://vitux.com/wp-content/uploads/word-image-14-300x44.png 300w" sizes="(max-width: 458px) 100vw, 458px" />

Add only those users in that list to whom you want to provide overall access on the system.

Create a user to access FTP Services

To create a user for using FTP service, use the following command:

# useradd user1
# passwd user1

Add that user in user_list file to restrict a user to their home directory, use the following command:

# vim /etc/vsftpd/user_list

Type " i " for insert and type that user name, as shown in the figure:

<img src="https://vitux.com/wp-content/uploads/word-image-15.png" alt="Create FTP user" width="273" height="41" srcset="https://vitux.com/wp-content/uploads/word-image-15.png 273w, https://vitux.com/wp-content/uploads/word-image-15-270x41.png 270w" sizes="(max-width: 273px) 100vw, 273px" />

Press ESC and type :wq! for save the file.

If you want to provide a specific user an overall access to the system add that user in /etc/vsftpd/chroot_list.

Restart the VSFTPD Service:

# systemctl restart vsftpd

<img src="https://vitux.com/wp-content/uploads/word-image-16.png" alt="Apply configuration changes" width="443" height="72" srcset="https://vitux.com/wp-content/uploads/word-image-16.png 443w, https://vitux.com/wp-content/uploads/word-image-16-300x49.png 300w" sizes="(max-width: 443px) 100vw, 443px" />

Verify the status of FTP Service using the following command:

# systemctl status vsftpd

<img src="https://vitux.com/wp-content/uploads/word-image-17.png" alt="Check FTP service status" width="568" height="184" srcset="https://vitux.com/wp-content/uploads/word-image-17.png 568w, https://vitux.com/wp-content/uploads/word-image-17-300x97.png 300w" sizes="(max-width: 568px) 100vw, 568px" />

Configure Firewall for FTP

To allow FTP service through the firewall, use the following command:

# firewall-cmd - - add-service = ftp - - permanent
# firewall-cmd - - reload

<img src="https://vitux.com/wp-content/uploads/word-image-18.png" alt="Configure firewalld for FTP" width="635" height="60" srcset="https://vitux.com/wp-content/uploads/word-image-18.png 635w, https://vitux.com/wp-content/uploads/word-image-18-300x28.png 300w" sizes="(max-width: 635px) 100vw, 635px" />

<img src="https://vitux.com/wp-content/uploads/word-image-19.png" alt="Apply Firewall configuration changes" width="404" height="71" srcset="https://vitux.com/wp-content/uploads/word-image-19.png 404w, https://vitux.com/wp-content/uploads/word-image-19-300x53.png 300w" sizes="(max-width: 404px) 100vw, 404px" />

Testing FTP Server from Windows Machine

To connect to FTP Server need a client software. The most commonly used software for FTP is FileZilla , WINSCP, etc. I am using FileZilla for connection.

Open Up your FTP Client Software, enter the following details to connect:

Host -- > IP address or hostname.

Username : FTP username (In my case it is user1)

Password

Port: 21

<img src="https://vitux.com/wp-content/uploads/word-image-20.png" alt="Test FTP Connection" width="754" height="37" srcset="https://vitux.com/wp-content/uploads/word-image-20.png 754w, https://vitux.com/wp-content/uploads/word-image-20-300x15.png 300w, https://vitux.com/wp-content/uploads/word-image-20-750x37.png 750w" sizes="(max-width: 754px) 100vw, 754px" />

After successfully connected, you can upload/download files according to your need.

<img src="https://vitux.com/wp-content/uploads/word-image-21.png" alt="FTP Connection tested successfully" width="588" height="312" srcset="https://vitux.com/wp-content/uploads/word-image-21.png 588w, https://vitux.com/wp-content/uploads/word-image-21-300x159.png 300w" sizes="(max-width: 588px) 100vw, 588px" />

Conclusion

In this tutorial we learned how to set up an FTP server on Centos 8, how to restrict users to their home directory and how to grant them read/write access. We also saw how to give the specific user general access to the system.

How to set up an FTP Server on CentOS 8 using VSFTPD Karim Buzdar May 18, 2020 CentOS , Linux , Shell

[Feb 24, 2013] PROFTPD vs VSFTPD

May 15, 2010 | Web Hosting Talk

jamjam

Web Hosting Evangelist Join Date: Mar 2009
Posts: 519

PROFTPD vs VSFTPD
--------------------------------------------------------------------------------

PROFTPD vs VSFTPD which one would you choose and why I've been vsftpd on my personal servers before but is there any advantage in using proftpd?

TheServerExperts, Web Hosting Master

From those two i would go with ProFTPd.

But we recommend Pure-FTPd - http://www.pureftpd.org/

Pure-ftpd is the default cPanel ftp of choice, it use to be proftpd :-)

ProFTPD

Advantages

* Allows use of .ftpaccess files for per-directory access controls.
* Supports TCPwrappers based access controls.
* Highly configurable.

Disadvantages

* Uses more memory
* Recommended only when additional configuration flexibility is required.

Pure-FTPD

Advantages

* Faster login time.
* Uses less memory.
* Allows virtual access on any IP address.
* Better security model.
* Allows virtual user quotas.
* More compatible with software RAID systems.

Disadvantages

* Fails PCI Compliance testing on FreeBSD systems.

Patrick, Stairway To Hosting

VSFTPD is the clear winner between the two, unless of course you're talking about using it alongside cPanel in which case just stick with PureFTPD for compatibility reasons. (VSFTPD is very lightweight compared to ProFTPD and probably has a better security track record...)

[Feb 24, 2013] ProFtpd vs. VsFtpd

July 15th, 2009 | Ubuntu Forums

chrisinspace

ProFtpd vs. VsFtpd

--------------------------------------------------------------------------------

I am about to put an FTP solution in place and I've been doing some research. I know there are a lot of solutions out there, but here is my criteria:

SECURE - This is critical. I plan to do an FTP over SSL (FTPS) implementation. This server will reside in a DMZ.

Well-documented - I'm fairly new at this. I've been using Linux on the desktop for a few years now and I have a little experience managing an Ubuntu server, but I need somewhere to turn if I get stuck.

Good community support - goes hand-in-hand with the previous point about documentation.

Not too hard for end-users who will be connecting to the server - I need to be able to walk semi-savvy users through the process of connecting to my FTP server using common clients such as Core FTP, Filezilla, CuteFTP, etc. I've narrowed it down to ProFtpd and VsFtpd. Can anyone make any recommendations as to one over the other? Are there any key features that differentiate them? One thing that I heard about VsFtpd that I like is that there is a Webmin plugin available for managing the server.

I have Webmin set up on another Ubuntu server and I use it for general admin, Apache, and MySQL. It would be nice to centralize on that platform if possible. I'd really appreciate any advice.

You tried your best and failed miserably. The lesson is: never try." --Homer Simpson

scorp123:

You've already done all research. What do you expect? That we toss a coin for you?

I personally would not bother with FTP at all and stick to OpenSSH instead. The entire exercise with setting up a FTP server and enabling SSL certificates so you'd get "FTPS" seems highly redundant to me, when instead you could simply stick to SSH and use SFTP which already provides this functionality right out of the box.

giggins :

I've got to agree with scorp123 on this one. SFTP meets all the things you have listed, plus it has numerous clients available for virtually every platform. FTP with security is a hacked abomination of an already pretty old and broken protocol. See http://en.wikipedia.org/wiki/FTPS for more details, especially the section about "Firewall incompatibilities". If your goal is to provide a secure way for users to connect, using SFTP is a great way to go, and it will allow you to use PAM for authentication, so you can use MySQL, LDAP, or whatever else you want for auth.

If that's not to your liking, you can try using WebDAV with Apache2. If you're trying to setup FTP for web developers, then this is a great alternative, as it allows them to directly edit the files they can then view through their hosted sites. Here's a link to help with that: http://www.howtoforge.com/how-to-set...on-ubuntu-8.10.

I guess to be fair though, if the only thing you want to compare are ProFtpd and VsFtpd, then its really a matter of personal preference. They both use standards, both have decent records as far as security is concerned, both have been around for a while, and they both have a ton of documentation and features. Try them both and let us know which one you choose and why.

Howto Easy FTP with vsftpd

August 5, 2007 | Ubuntu Forums

Howto: Easy FTP with vsftpd

I like vsftpd. It's very very simple to configure.

Now let's get to the point.

Installation

Code:

sudo apt-get install vsftpd

This installs ssl-cert, openssl and vsftpd, only with anonymous login and just for downloads from a jailed /home/ftp/.

Configuration

Make a copy of the original configuration file. It is very well commented. Keep a copy to have the original settings and comments, just in case.

Code:

sudo cp /etc/vsftpd.conf /etc/vsftpd.conf.original

Now edit the file /etc/vsftpd.conf and change it's settings as follows.

Basic Setup

To disable anonymous login and to enable local users login and give them write permissions:

Code:

# No anonymous login
anonymous_enable=NO
# Let local users login
# If you connect from the internet with local users, you should enable TLS/SSL/FTPS
local_enable=YES

# Write permissions
write_enable=YES

NOTE: It is not advisable to use FTP without TLS/SSL/FTPS over the internet because the FTP protocol does not encrypt passwords. If you do need to transfer files over FTP, consider the use of virtual users (same system users but with non system passwords) or TLS/SSL/FTPS (see below).

To chroot users

To jail/chroot users (not the vsftpd service), there are three choices. Search for "chroot_local_users" on the file and consider one of the following:

Code:

# 1. All users are jailed by default:
chroot_local_user=YES
chroot_list_enable=NO

# 2. Just some users are jailed:
chroot_local_user=NO
chroot_list_enable=YES
# Create the file /etc/vsftpd.chroot_list with a list of the jailed users.

# 3. Just some users are "free":
chroot_local_user=YES
chroot_list_enable=YES
# Create the file /etc/vsftpd.chroot_list with a list of the "free" users.

To deny (or allow) just some users to login

To deny some users to login, add the following options in the end of the file:

Code:

userlist_deny=YES
userlist_file=/etc/vsftpd.denied_users

In the file /etc/vsftpd.denied_users add the username of the users that can't login. One username per line.

To allow just some users to login:

Code:

userlist_deny=NO
userlist_enable=YES
userlist_file=/etc/vsftpd.allowed_users

In the file /etc/vsftpd.allowed_users add the username of the users that can login.

The not allowed users will get an error that they can't login before they type their password.

TLS/SSL/FTPS

NOTE: you definitely have to use this if you connect from the Internet.

To use vsftpd with encryption (it's safer), change or add the following options (some options aren't on the original config file, so add them):

Code:

ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES
# Filezilla uses port 21 if you don't set any port
# in Servertype "FTPES - FTP over explicit TLS/SSL"
# Port 990 is the default used for FTPS protocol.
# Uncomment it if you want/have to use port 990.
#listen_port=990

No need to create a certificate. vstfpd uses the certificate Ubuntu creates upon it's installation, the "snake-oil" certificate (openssl package, installed by default). Please don't be afraid of it's name! :-)

Install Filezilla (on the repositories), and use the Servertype "FTPES - FTP over explicit TLS/SSL" option to connect to the server with TLS/SSL/FTPS.

Additional Options

Here are some other available options. The values are examples:

Code:

# Show hidden files and the "." and ".." folders.
# Useful to not write over hidden files:
force_dot_files=YES

# Hide the info about the owner (user and group) of the files.
hide_ids=YES

# Connection limit for each IP:
max_per_ip=2

# Maximum number of clients:
max_clients=20

Apply new configuration settings

Don't forget that to apply new configurations, you must restart the vsftpd service.

Code:

sudo /etc/init.d/vsftpd restart

Webmin Module

For those who use webadmin, there is a module for VSFTPD here http://www.webmin.com/third.html.

Firewall Problems

If you find problems when connecting, set pasv_min_port and pasv_max_port in /etc/vsftpd.conf and allow outbound connections in the ports you set in your firewall.

Code:

pasv_min_port=12000
pasv_max_port=12100

Virtual users with TLS/SSL/FTPS and a common upload directory - Complicated vsftpd

Virtual users are users that do not exist on the system - they are not in /etc/passwd, do not have a home directory on the system, can not login but in vsftpd - or if they do exist, they can login in vsftpd with a non system password - security.

You can set different definitions to each virtual user, granting to each of these users different permissions. If TLS/SSL/FTPS and virtual users are enabled, the level of security of your vsftpd server is increased: encrypted passwords, with passwords that are not used on the system, and users that can't access directly to their home directory (if you want).

The following example is based and adapted on the example for virtual users in vsftpd site, on documentation and the very good examples in this forum that can be found here and here.

From the FAQ in vsftpd site:

Quote:

Note - currently there is a restriction that with guest_enable enabled, local users also get mapped to guest_username.

This is a polite way to say that if the default vsftpd PAM file is used, the system users will be guests too. To avoid confusions change the PAM file used by vsftpd to authenticate only virtual users, make all vsftpd users as virtual users and set their passwords, home and permissions based on this example.

The workshop

This is an example for a work directory where various virtual users can save (upload) their work - in this case it will be /home/work, that must be owned by the guest_username (workers).

Create the system user (workers) and the work directory (/home/work) to be used by the virtual users in vsftpd where they will upload their work in it:

Code:

# Don't use -m (--create-home) option. This avoids creating a home
# directory based on /etc/skel (.bash* and .profile files).
sudo useradd -d /home/work workers
sudo mkdir /home/work
sudo chown workers /home/work

Create directories to save the virtual users definitions.

Code:

sudo mkdir /etc/vsftpd
sudo mkdir /etc/vsftpd/vusers

Change the PAM authentication in vsftpd.conf and create a new PAM file that uses the pam_userdb module to provide authentication for the virtual users.

If you still didn't do it, make a backup copy of your vsftpd.conf or make a backup copy of the default one (it is a very good starting point and it is very well commented, as I previously wrote).

Edit the default /etc/vsftpd.conf:

Code:

sudo nano /etc/vsftpd.conf

Change the line anonymous=YES, uncomment local_enable=YES and change pam_service_name=vsftpd:

Code:

# Disable anonymous_enable is optional.
anonymous_enable=NO
...
local_enable=YES
...
pam_service_name=ftp

Then add the TLS/SSL/FTPS definitions (from above) in the end of the file and after it also add:

Code:

# Enable (only) guests.
guest_enable=YES
# This is not needed, it's the default. Just here for clarity.
guest_username=ftp
# Where the guests (virtual) usernames are set.
user_config_dir=/etc/vsftpd/vusers

The default settings in vsftpd.conf are restricted just for anonymous user that can download from /home/ftp, are chrooted there and can't upload nor create directories. Virtual users are treated as anonymous users by vsftpd. We have disabled anonymous logins, enabled local_users (virtual users in this case, authenticated by the PAM file we will create) and enabled guests (local users - guests - will be virtual users).

The rest of the options are the default ones, so nobody can upload and because we set guest_enable=YES, if a username exists and have an empty username file, it will be treated as an anonymous user ("ftp" user). We added the TLS/SSL/FTPS so no cleartext passwords are used in the connections.

Now you will override the vsftpd.conf settings for each username individually with files in the directory /etc/vsftpd/vusers wich was set in "user_config_dir=" option. Lets continue.

Create the new file /etc/pam.d/ftp for the new authentication system:

Code:

sudo nano /etc/pam.d/ftp

And add the following content:

Code:

auth required /lib/security/pam_userdb.so db=/etc/vsftpd/vsftpd_login
account required /lib/security/pam_userdb.so db=/etc/vsftpd/vsftpd_login

Create a file with the virtual usernames and passwords that can login (one line for username, one line for password and so on for all the users) and call it "logins.txt":

Code:

mike
password1
sarah
password2

Install libdb3-util, create the login database with the file logins.txt and restrict permissions to the database:

Code:

sudo apt-get install libdb3-util
sudo db3_load -T -t hash -f logins.txt /etc/vsftpd/vsftpd_login.db
sudo chmod 600 /etc/vsftpd/vsftpd_login.db
# This is not safe, you should delete this file.
sudo chmod 600 logins.txt

Create a file for the workers settings (mike and sarah on logins.txt):

Code:

sudo nano /etc/vsftpd/workers

Add the new definitions for this users (remember that virtual users are treated as anonymous users by default on vsftpd, default anonymous settings are set on /etc/vsftpd.conf):

Code:

write_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
anon_upload_enable=YES
local_root=/home/work
chroot_local_user=YES
dirlist_enable=YES
download_enable=YES
guest_username=workers

Link this file to the workers usernames in /etc/vsftpd/vusers/, so that any change made at /etc/vsftpd/workers is applied to all workers (after you restart vsftpd).

Code:

sudo ln -s /etc/vsftpd/workers /etc/vsftpd/vusers/mike
sudo ln -s /etc/vsftpd/workers /etc/vsftpd/vusers/sarah

If this was suppose to be for web development, you would add this directory in apache, make it an available site and enable it as an enabled website.

Restart vsftpd.

System users as a virtual user with non-system password

The next example file for one user, like a system user. Add his username and a password - not the system one please, just to be a little bit safer - in logins.txt and repeat the db3_load command. Create a file named after his username inside /etc/vsftpd/vusers/:

Code:

sudo nano /etc/vsftpd/vusers/user

And save the following in it:

Code:

write_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
anon_upload_enable=YES
chroot_local_user=YES
# change /home/user to the actual user home directory.
local_root=/home/user
dirlist_enable=YES
download_enable=YES
guest_username=user

As you can see, guest_username is important because it will be the user that owns the uploaded files on the directories owned by the guest_username and only files owned by this guest_username can be deleted by him (if you allow it). If you don't set a guest_username, then the "ftp" user will be the used (default in /etc/vsftpd.conf). If you create an empty file of a username present in /etc/vsftpd/vsftpd_login.db (logins.txt), this user will only have the permissions set to anonymous users in /etc/vsftpd.conf, his default home directory will be /home/ftp/ and the owner of the files he uploads (if you allow him and the directory is owned by ftp) will be "ftp".

Only usernames in both /etc/vsftpd/vsftpd_login.db (logins.txt) AND with a file in /etc/vsftpd/vusers/ can login. So, the username can't login if:

- If a file exist in /etc/vsftpd/vusers/ but the username is not in /etc/vsftpd/vsftpd_login.db (logins.txt) - you can add filenames that aren't on the database, no harm done.
- If the username is in /etc/vsftpd/vsftpd_login.db (logins.txt) but do not exist in /etc/vsftpd/vusers/ - you can disable logins, just (re)move/rename the file(s) and/or link(s).

Restart vsftpd.

EDIT1: removed SFTP reference in TLS/SSL/FTPS section
EDIT2: added virtual users configuration.
EDIT3: added allow/deny userlist.

---

Last edited by epimeteo; November 14th, 2007 at 01:26 PM.. Reason: added allow/deny userlist

VSFTPD... - openSUSE Forums

This time, I got the FTP I want!!! yay - I can only allow my suse users to FTP and anonymous users = no!!

However, Im struggling to hide the .files (dot files) any ideas? Iv added force_dot_files=YES and also NO but they are still showing...

Thanks for any help.

Recommended Links

Softpanorama Recommended

Top articles

Sites

• How to set up an FTP Server on CentOS 8 using VSFTPD
• vsftpd - Wikipedia, the free encyclopedia
• vsftpd - Secure, fast FTP server for UNIX-like systems
• a vsftpd guide and tutorial - vsftpdrocks.org
• Network Services - Configuring Vsftpd
• Linux Home Server HOWTO - FTP Server

Etc

Society

Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy

Quotes

War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotes :  Somerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose Bierce :  Bernard Shaw : Mark Twain Quotes

Bulletin:

Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law

History:

Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOS :  Programming Languages History : PL/1 : Simula 67 : C : History of GCC development :  Scripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-Month :  How to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Hater’s Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D

The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: May 20, 2020