
########################
## Set up anonymous FTP
########################

1) First, grab ~rbuccigrossi/packages/vsftpd-2.1.2.tar.gz from int.nitrc.org

2) Compile it on the destimation machine:

  tar -zxf vsftpd-2.1.2.tar.gz
  cd vsftpd-2.1.2/
  make
  slide
  make install
  cp vsftpd.conf /etc/vsftpd.conf
  cp xinetd.d/vsftpd /etc/xinetd.d/vsftpd

3) Edit /etc/vsftpd.conf. 

Edit (so we can use xinetd):

listen=NO

Add at the end:

anon_root=/home/groups
local_enable=NO
write_enable=NO
pasv_min_port=20000
pasv_max_port=30000

4) Edit /etc/sysconfig/iptables.  Add:

#allow anonymous ftp through vsftpd
-A INPUT -i eth1 -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 20000:30000 -j ACCEPT

5) Restart iptables

/etc/init.d/iptables restart

6) Sanity checks:
 The users nobody and ftp should exist
 The directory /usr/share/empty should exist

7) Set up /var/ftp

 mkdir /var/ftp
 chown root.root /var/ftp
 chmod og-w /var/ftp

8) Restart xinetd

/etc/init.d/xinetd restart

9) Test from a remote machine (ideally through firefox): ftp://www.nitrc.org/
