How to Install ProFTPD on Ubuntu 24.04

Install ProFTPD

On Ubuntu, you can install ProFTPD using the command below. There are no additional packages to install since ProFTPD packages are included in Ubuntu’s default repositories.

sudo apt update
sudo apt install proftpd-core

Once installed, its default configuration file is at [/etc/proftpd/proftpd.conf].

Configure basic settings

To configure basic ProFTPD settings, open the main configuration file using the command `sudo nano /etc/proftpd/proftpd.conf` and then adjust the server settings to fit your needs.

sudo nano /etc/proftpd/proftpd.conf

Then, adjust the server settings based on your environment.

# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
# Comment out to turn off IPv6 if you don't need it

#UseIPv6 on

#
#Change the server name to match your environment

ServerName "proftpd.example.com"

# Use this to jail all users in their homes 
# line 39 : uncomment (specify root directory for chroot)
 
DefaultRoot ~

#
..........
..........

Save the file and exit.

Next, run the command below to open the ftpusers file. This file contains all accounts you do not want access to the FTP server.

sudo nano /etc/ftpusers

Add your account name to the file to prohibit access. Add other accounts on separate lines to prevent more users from accessing FTP.

root

Save and exit the file, then restart Pro-FTPD.

sudo systemctl restart proftpd

At this point, you should be able to access Pro-FTPD using any FTP client. All user accounts not included in the ftpusers file will be granted access.

Access ProFTPD over SSL/TLS

To secure your ProFTPD connection, you’ll set it up to use SSL/TLS encryption, which is like a secure tunnel for your data.

Use a public certificate like Let’s Encrypt or a self-signed on your server.

For this post, we’ll be creating a self-signed certificate for ProFTPD.

Run the command below to generate a self-signed certificate to use with ProFTPD.

sudo openssl req -x509 -nodes -newkey rsa:3072 -keyout proftpd.pem -out proftpd.pem -days 3650

When prompted, enter the certificate details.

Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:NY
Locality Name (eg, city) []:Brooklyn
Organization Name (eg, company) [Internet Widgits Pty Ltd]:GeekRewind
Organizational Unit Name (eg, section) []:IT
Common Name (e.g. server FQDN or YOUR name) []:proftpd.example.com
Email Address []:

After generating the certificates, copy them into the [/etc/ssl/private] directory.

sudo cp proftpd.* /etc/ssl/private
sudo chmod 600 /etc/ssl/private/proftpd.pem

Next, install the Pro-FTPD SSL module by running the command below.

sudo apt install proftpd-mod-crypto

After installing the module, run the command below to open its configuration file.

sudo nano /etc/proftpd/modules.conf

Update the lines below in the file to reference the new certificates.

# Install proftpd-mod-crypto to use this module for TLS/SSL support.
# Uncomment to enable SSL/TLS

LoadModule mod_tls.c

........
........

Save the exit the file.

Next, reopen the Pro-FTPD configuration file.

sudo nano /etc/proftpd/proftpd.conf

Then, uncomment line #143 to include the TLS configuration.

# This is used for FTPS connections
#

Include /etc/proftpd/tls.conf

#

Save the file and exit.

Next, open the Pro-FTPD TLS configuration file.

sudo nano /etc/proftpd/tls.conf

Uncomment

#Uncomment the lines below and update the TLS protocol.

TLSEngine                               on
TLSLog                                  /var/log/proftpd/tls.log
TLSProtocol                             TLSv1.3

#
#

#Uncomment lines 27/8 and specify the certificates created above.

TLSRSACertificateFile                   /etc/ssl/private/proftpd.pem
TLSRSACertificateKeyFile                /etc/ssl/private/proftpd.pem

#
#

Exit and save the file, then restart Pro-FTPD services by running the command below.

sudo systemctl restart proftpd

With SSL/TLS configured, open your FTP client and set up the sites to use SSL/TLs.

Since we used a self-signed certificate when prompted to trust it, OK.

Now, Pro-FTPD is communicating over SSL/TLS.

That should do it!

Conclusion:

• ProFTPD Installation: 💿 Installing ProFTPD on Ubuntu 24.04 is straightforward, requiring minimal setup.
• Secure Communication: Configuring SSL/TLS enhances security, ensuring safe data transmission.
• Customization: ProFTPD allows customization of server settings to fit specific user needs.
• Reliable Performance: Known for its stability, ProFTPD is a trusted choice for file transfers.
• User Access Control: Utilizing the ftpusers file helps manage which users can access the FTP server.
• Self-Signed Certificates: A self-signed certificate can provide an immediate solution for secure connections.

With these steps, you can effectively set up and secure your ProFTPD server for efficient file management.