Very Secure FTP daemon (vsftp) is an FTP server with a General Public Licensed (GPL), this server is being used for UNIX systems, including Linux (RHEL, CentOS, Fedora, and other Linux distributions.

Part1: Installing and configuring the service to only allow anonymous access:

# yum install vsftpd
# service vsftpd start
# chkconfig vsftpd on
or
# chkconfig
# vi /etc/vsftpd/vsftpd.conf
or
Configure anonymous-only download
anonymous_enable=YES
anon_upload_enable=NO
local_enable=NO

Part2: Configuring the firewall:

We need to open the firewall for ftp ports 20 and 21 to make sure the FTP server can be accessed from the internet.

You can access the firewall from the GUI interface by going to system Administration firewall or by typing system-config-firewall from the terminal

RH_VSF01

On the “Trusted Services” check the “FTP” option

Part3: Configuring SELinux to support the service:

Check SELinux Manual

# man ftpd_selinux

Install SELinux package

# yum install policycoreutils-gui
# yum install setroubleshoot-server

Use public_content_t file context for content

# semanage fcontext -a -t public_content_t “/var/ftp(/.*)?”
# restorecon -F -R -v /var/ftp

Enable SEBoolian

# getsebool -a | grep ftpd
allow_ftpd_anon_write –> off
allow_ftpd_full_access –> off
allow_ftpd_use_cifs –> off
allow_ftpd_use_nfs –> off
ftpd_connect_db –> off

Or you can access it from the GUI interface by going to system Administration SELinux Management
RH_VSF02

Part4: Testing the FTP service:

from a remote server type

# ftp servername.com

RH_VSF03