• Setup FTP Server Using pure-ftpd on Debian Bullseye
• Connect a Windows 11 Machine to the Debian FTP Server Using FileZilla
  • Prerequisites
  • Step-by-Step Process
• Security Best Practices
• Troubleshooting Common Issues

#Setup FTP Server Using pure-ftpd on Debian Bullseye

1. Update Your System
   • Ensure your Debian system is up-to-date to avoid any compatibility issues. Open a terminal and execute the following commands:
     sudo apt-get update sudo apt-get upgrade
2. Install pure-ftpd
   • Install the pure-ftpd package by running:
     sudo apt-get install pure-ftpd
3. Basic Configuration
   • pure-ftpd comes with a sensible set of defaults, but you can customize its behavior by creating configuration files in /etc/pure-ftpd/conf/.
   • Enable Passive Mode Ports:
     • Define a range of ports for passive mode to enhance firewall compatibility.
       echo "30000 35000" | sudo tee /etc/pure-ftpd/conf/PassivePortRange
   • Restrict to Local Users:
     • Ensure only local system users can access the FTP server.
       echo "yes" | sudo tee /etc/pure-ftpd/conf/NoAnonymous
   • Enable TLS (Optional for FTPS):
     • For encrypted connections, generate a TLS certificate.
       sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem sudo chmod 600 /etc/ssl/private/pure-ftpd.pem echo "2" | sudo tee /etc/pure-ftpd/conf/TLS
   • Restart pure-ftpd to Apply Changes:
     sudo systemctl restart pure-ftpd
4. Creating an FTP User
   • It’s a good practice to create a dedicated user for FTP access to limit system exposure and enhance security.
   • Create a New User ftpuser with a Home Directory:
     sudo useradd -m ftpuser -d /home/ftpuser -s /usr/sbin/nologin sudo passwd ftpuser
   • Set Appropriate Permissions:
     • Ensure the FTP user has necessary permissions on their home directory.
       sudo chown -R ftpuser:ftpuser /home/ftpuser
5. Adjust Firewall Settings
   • If you have a firewall enabled, ensure it allows traffic on the FTP port (21 by default) and the passive mode port range defined earlier.
   • Using UFW:
     sudo ufw allow 21/tcp sudo ufw allow 30000:35000/tcp sudo ufw reload
   • Using iptables:
     sudo iptables -A INPUT -p tcp --dport 21 -j ACCEPT sudo iptables -A INPUT -p tcp --dport 30000:35000 -j ACCEPT sudo netfilter-persistent save
   • Ensure that your server’s firewall rules are configured correctly to allow FTP traffic.
6. Start and Enable pure-ftpd
   • To ensure pure-ftpd starts automatically at boot, enable it using:
     sudo systemctl enable pure-ftpd
   • Start the pure-ftpd service:
     sudo systemctl start pure-ftpd

#Connect a Windows 11 Machine to the Debian FTP Server Using FileZilla

#Prerequisites

• FTP Server Details: Ensure you have the Debian server’s IP address, FTP username (ftpuser), and password.
• FileZilla Client Installed: Download and install the FileZilla Client on your Windows machine.

#Step-by-Step Process

1. Download and Install FileZilla
   • Visit the FileZilla download page to download the FileZilla FTP client for Windows.
   • Run the installer and follow the on-screen instructions to complete the installation.
2. Launch FileZilla
   • Open the FileZilla application. Upon first launch, a welcome pop-up may appear; click OK to proceed.
3. Configure FTP Connection
   • At the top of the FileZilla window, locate the Quickconnect bar with fields for Host, Username, Password, and Port.
   • Enter the Following Details:
     • Host: <IP-of-the-FTP-Server> (e.g., 192.168.1.100)
     • Username: ftpuser
     • Password: Your FTP user’s password
     • Port: 21 for FTP or 22 for SFTP (if configured)
   • Example:
     Host: 192.168.1.100 Username: ftpuser Password: yourpassword Port: 21

     Note: Do not include ftp:// in the Host field.

4. Connect to the FTP Server
   • Click the Quickconnect button.
   • Security Prompt: If connecting via FTPS, a certificate warning may appear. Verify the certificate details and click Yes to trust the connection.
   • Successful Connection Indicators:
     • The Remote Site pane (right side) will populate with directories from the Debian FTP server.
     • The Local Site pane (left side) displays your Windows machine’s directories.
5. Browse and Transfer Files
   • Uploading Files:
     • Navigate to the desired local directory in the Local Site pane.
     • Drag and drop files or folders to the desired location in the Remote Site pane.
   • Downloading Files:
     • Navigate to the desired directory in the Remote Site pane.
     • Drag and drop files or folders to the desired location in the Local Site pane.
   • File transfers will display progress and status in the bottom pane.
6. Using Site Manager for Future Connections (Optional)
   • Save Connection Details for Easy Access:
     • Go to File > Site Manager.
     • Click New Site and enter a name (e.g., Debian FTP Server).
     • Enter Connection Details:
       • Host: <IP-of-the-FTP-Server>
       • Port: 21 for FTP or 22 for SFTP
       • Protocol: Choose FTP - File Transfer Protocol or SFTP - SSH File Transfer Protocol based on your server configuration.
       • Encryption: Select Use explicit FTP over TLS if available for FTPS or Only use plain FTP (not recommended).
       • Logon Type: Select Normal.
       • User: ftpuser
       • Password: Your FTP user’s password
     • Click Connect to save and establish the connection.
   • Access Saved Sites Quickly:
     • Launch FileZilla and open Site Manager.
     • Select your saved site and click Connect to establish a connection without re-entering credentials.

#Security Best Practices

• Use SFTP or FTPS: To secure your FTP connections, consider using SFTP (which uses SSH) or FTPS (FTP over TLS). This encrypts data transfers, protecting sensitive information.
• Strong Passwords: Ensure that FTP user accounts use strong, unique passwords to prevent unauthorized access.
• Limit User Permissions: Restrict FTP users to only the directories they need access to, minimizing potential security risks.
• Regular Updates: Keep both the FTP server (pure-ftpd) and FileZilla client updated to the latest versions to benefit from security patches and new features.

#Troubleshooting Common Issues

1. Cannot Connect to FTP Server:
   • Check Server Status: Ensure that the pure-ftpd service is running on the Debian server.
     sudo systemctl status pure-ftpd
   • Verify Firewall Settings: Confirm that the firewall allows traffic on the FTP and passive ports.
   • Confirm Credentials: Double-check the FTP username and password for accuracy.
2. Connection Times Out:
   • Network Issues: Verify that both machines are on the same network or that the server is accessible over the internet.
   • Port Blocking: Ensure that no intermediate firewalls or network policies are blocking FTP ports.
3. Permission Denied Errors:
   • User Permissions: Ensure the FTP user has the necessary permissions for the target directories.
   • Directory Ownership: Verify that directories are owned by the FTP user.
     sudo chown -R ftpuser:ftpuser /home/ftpuser
4. Encryption Errors with FTPS/SFTP:
   • Certificate Validity: Ensure that the TLS certificate is correctly configured and not expired.
   • Protocol Compatibility: Confirm that both FileZilla and pure-ftpd are configured to use compatible encryption settings.