Download TrueNAS CORE
Download TrueNAS SCALE
Get TrueNAS EnterpriseFTP Screen
5 minute read.
Last Modified 2022-06-13 16:25 EDTUse the FTP services screen to configure FTP service settings for your TrueNAS system.
After making changes to settings use SAVE to confirm and save your changes.
Use ADVANCED OPTIONS to display advanced settings options, and use BASIC OPTIONS to return to the basic settings options.
Use CANCEL to exit without saving.
| Name | Description |
|---|---|
| Port | Enter the port the FTP service listens on. |
| Clients | Enter the maximum number of simultaneous clients. |
| Connections | Enter the maximum number of connections per IP address. 0 is unlimited. |
| Login Attempts | Enter the maximum attempts before client is disconnected. Increase if users are prone to misspellings or typos. |
| Timeout | Enter the maximum client idle time in seconds before disconnect. Default value is 600 seconds. |
| Certificate | Select the SSL certificate to use for TLS FTP connections from the dropdown list, which is currently freenas_default. To create a certificate, go to System > Certificates. |
Use Advanced Options if you need to customize your FTP service beyond the settings on the Basic Options screen.
Access Settings
| Name | Description |
|---|---|
| Always Chroot | Select to only allow users access their home directory if they are in the wheel group. This option increases security risk. |
| Allow Root Login | Select to allow root logins. Setting this option is discouraged as it increases security risk. |
| Allow Anonymous Login | Select to allow anonymous FTP logins with access to the directory specified in Path. |
| Allow Local User Login | Select to allow any local user to log in. By default, only members of the ftp group are allowed to log in. |
| Require IDENT Authentication | Select to require IDENT authentication. Setting this option results in timeouts when ident (or in Shell identd) is not running on the client. |
| File Permissions | Sets default permissions for newly created directories. |
TLS Settings
Unless necessary, do NOT allow anonymous or root access. For better security, enable TLS when possible. This is effectively FTPS. When FTP is exposed to a WAN, enable TLS.
| Name | Description |
|---|---|
| Enable TLS | Select to allow encrypted connections. Requires a certificate (created or imported using System > Certificates. |
| TLS Policy | Select the policy from the dropdown list of options. Options are On, off, Data, !Data, Auth, Ctrl, Ctrl + Data, Ctrl +!Data, Auth + Data or Auth +!Data. Defines whether the control channel, data channel, both channels, or neither channel of an FTP session must occur over SSL/TLS. The policies are described here. |
| TLS Allow Client Renegotiations | Select to allow client renegotiations. This option is not recommended. Setting this option breaks several security measures. See mod_tls for details. |
| TLS Allow Dot Login | If select, TrueNAS checks the user home directory for a .tlslogin file containing one or more PEM-encoded certificates. If not found, the user is prompted for password authentication. |
| TLS Allow Per User | If set, allows sending a user password unencrypted. |
| TLS Common Name Required | Select to require the common name in the certificate to match the FQDN of the host. |
| TLS Enable Diagnostics | Selected to logs more verbose, which is helpful when troubleshooting a connection. |
| TLS Export Certificate Data | Select to export the certificate environment variables. |
| TLS No Certificate Request | Select if the client cannot connect likely because the client server is poorly handling the server certificate request. |
| TLS No Empty Fragments | Not recommended. This option bypasses a security mechanism. |
| TLS No Session Reuse Required | This option reduces connection security. Only use it if the client does not understand reused SSL sessions. |
| TLS Export Standard Vars | Selected to set several environment variables. |
| TLS DNS Name Required | Select to require the client DNS name to resolve to its IP address and the cert contain the same DNS name. |
| TLS IP Address Required | Select to require the client certificate IP address to match the client IP address. |
Bandwitdth Settings
| Name | Description |
|---|---|
| Local User Upload Bandwidth: (Examples: 500 KiB, 500M, 2 TB) | Enter a value. If measurement is not specified it defaults to KiB. This field accepts human-readable input in KiBs or greater (M, GiB, TB, etc.). Default 0 KiB is unlimited. |
| Local User Download Bandwidth | Enter a value. If measurement is not specified it defaults to KiB. This field accepts human-readable input in KiBs or greater (M, GiB, TB, etc.). Default 0 KiB is unlimited. |
| Anonymous User Upload Bandwidth | Enter a value. If measurement is not specified it defaults to KiB. This field accepts human-readable input in KiBs or greater (M, GiB, TB, etc.). Default 0 KiB is unlimited. |
| Anonymous User Download Bandwidth | Enter a value. If measurement is not specified it defaults to KiB. This field accepts human-readable input in KiBs or greater (M, GiB, TB, etc.). Default 0 KiB is unlimited. |
Other Options Settings
| Name | Description |
|---|---|
| Minimum Passive Port | Used by clients in PASV mode. A default of 0 means any port above 1023. |
| Maximum Passive Port | Used by clients in PASV mode. A default of 0 means any port above 1023. |
| Enable FXP | Select to enable the File eXchange Protocol (FXP). Not recommended as this leaves the server vulnerable to FTP bounce attacks. |
| Allow Transfer Resumption | Select to allow FTP clients to resume interrupted transfers. |
| Perform Reverse DNS Lookups | Select to allow performing reverse DNS lookups on client IPs. Causes long delays if reverse DNS isn’t configured. |
| Masquerade Address | Public IP address or host name. Set if FTP clients cannot connect through a NAT device. |
| Display Login | Specify the message displayed to local login users after authentication. Thi is not displayed to anonymous login users. |
| Auxiliary Parameters | Used to add additional proftpd(8 parameters. |
See Configuring FTP for instructions on setting up FTP service for your TrueNAS.
Or see FTP, SFTP and TFTP Services for more information on other file transfer protocols.