FTP: Configure anonymous-only download

Install the vsftpd package:

# yum install -y vsftpd

Edit the /etc/vsftpd/vsftpd.conf file and set the local_enable directive to NO:

local_enable=NO

Add two new rules to the firewall:

# iptables -I INPUT -m state --state NEW -m tcp -p tcp --dport 20 -j ACCEPT
# iptables -I INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT

Save the firewall configuration:

# service iptables save

Edit the /etc/sysconfig/iptables-config file and change the IPTABLES_MODULES directive:

IPTABLES_MODULES="nf_conntrack_ftp nf_nat_ftp"

Restart the iptables service:

# service iptables restart

Activate the vsftpd service at boot:

# chkconfig vsftpd on

Start the vsftpd service:

# service vsftpd start