ISP Config3 and Pure-FTPD

Discussion in 'Installation/Configuration' started by gigaboy, May 19, 2011.

  1. gigaboy

    gigaboy New Member

    Hi,
    A couple of questions (I'm not real skilled with Linux) Thanks in advance for your help!

    1) How do I upgrade Pure-FTPd to the latest build from command line? Would have to use a .tar file, yum can't find the file - currently on v1.20, latest version is 1.32

    2) Pure-FTPd configuration Issue?
    Most of my clients are using Filezilla for FTP, however when they log in, we get a blank remote directory. Am I missing a configuration setting? The remote screen says "Not connected to any server". Below is the verbose log when attempting connection:

    Status: Resolving address of senglehart.com
    Status: Connecting to 50.56.118.57:21...
    Status: Connection established, waiting for welcome message...
    Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
    Response: 220-You are user number 1 of 50 allowed.
    Response: 220-Local time is now 14:00. Server port: 21.
    Response: 220-This is a private system - No anonymous login
    Response: 220-IPv6 connections are also welcome on this server.
    Response: 220 You will be disconnected after 15 minutes of inactivity.
    Command: USER senglehart-admin
    Response: 331 User senglehart-admin OK. Password required
    Command: PASS ************
    Response: 230-User senglehart-admin has group access to: client8 sshusers
    Response: 230 OK. Current restricted directory is /
    Command: SYST
    Response: 215 UNIX Type: L8
    Command: FEAT
    Response: 211-Extensions supported:
    Response: EPRT
    Response: IDLE
    Response: MDTM
    Response: SIZE
    Response: REST STREAM
    Response: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
    Response: MLSD
    Response: ESTP
    Response: PASV
    Response: EPSV
    Response: SPSV
    Response: ESTA
    Response: AUTH TLS
    Response: PBSZ
    Response: PROT
    Response: UTF8
    Response: 211 End.
    Command: OPTS UTF8 ON
    Response: 200 OK, UTF-8 enabled
    Status: Connected
    Status: Retrieving directory listing...
    Command: PWD
    Response: 257 "/" is your current location
    Command: TYPE I
    Response: 200 TYPE is now 8-bit binary
    Command: PASV
    Response: 227 Entering Passive Mode (50,56,118,57,184,42)
    Command: MLSD
    Trace: CFtpControlSocket::ResetOperation(10)
    Trace: CControlSocket::ResetOperation(10)
    Trace: CFtpControlSocket::ResetOperation(10)
    Trace: CControlSocket::ResetOperation(10)
    Error: Directory listing aborted by user
    Status: Disconnected from server
    Trace: CFtpControlSocket::ResetOperation(66)
    Trace: CControlSocket::ResetOperation(66)
    Status: Resolving address of senglehart.com
    Status: Connecting to 50.56.118.57:21...
    Status: Connection established, waiting for welcome message...
    Trace: CFtpControlSocket::OnReceive()
    Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
    Response: 220-You are user number 2 of 50 allowed.
    Response: 220-Local time is now 14:01. Server port: 21.
    Response: 220-This is a private system - No anonymous login
    Response: 220-IPv6 connections are also welcome on this server.
    Response: 220 You will be disconnected after 15 minutes of inactivity.
    Trace: CFtpControlSocket::SendNextCommand()
    Command: USER senglehart-admin
    Trace: CFtpControlSocket::OnReceive()
    Response: 331 User senglehart-admin OK. Password required
    Trace: CFtpControlSocket::SendNextCommand()
    Command: PASS ************
    Trace: CFtpControlSocket::OnReceive()
    Response: 230-User senglehart-admin has group access to: client8 sshusers
    Response: 230 OK. Current restricted directory is /
    Trace: CFtpControlSocket::SendNextCommand()
    Command: OPTS UTF8 ON
    Trace: CFtpControlSocket::OnReceive()
    Response: 200 OK, UTF-8 enabled
    Status: Connected
    Trace: CFtpControlSocket::ResetOperation(0)
    Trace: CControlSocket::ResetOperation(0)
    Status: Retrieving directory listing...
    Trace: CFtpControlSocket::SendNextCommand()
    Trace: CFtpControlSocket::ChangeDirSend()
    Command: PWD
    Trace: CFtpControlSocket::OnReceive()
    Response: 257 "/" is your current location
    Trace: CFtpControlSocket::ResetOperation(0)
    Trace: CControlSocket::ResetOperation(0)
    Trace: CFtpControlSocket::parseSubcommandResult(0)
    Trace: CFtpControlSocket::ListSubcommandResult()
    Trace: CFtpControlSocket::SendNextCommand()
    Trace: CFtpControlSocket::TransferSend()
    Command: TYPE I
    Trace: CFtpControlSocket::OnReceive()
    Response: 200 TYPE is now 8-bit binary
    Trace: CFtpControlSocket::TransferParseResponse()
    Trace: CFtpControlSocket::SendNextCommand()
    Trace: CFtpControlSocket::TransferSend()
    Command: PASV
    Trace: CFtpControlSocket::OnReceive()
    Response: 227 Entering Passive Mode (50,56,118,57,216,10)
    Trace: CFtpControlSocket::TransferParseResponse()
    Trace: CFtpControlSocket::SendNextCommand()
    Trace: CFtpControlSocket::TransferSend()
    Command: MLSD
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    1) If yum has no updates, then there is no need to install an update. Linux distributions apply security fixes to packages without increasing the major version numbers of the software.

    2) Try active mode instead of passive mode. If active mode works, then you have a problem that the firewall blocks the passive port range. To fix that, define a passive port range in the pure-ftpd configuration file and open that port range in the firewall.
     
  3. gigaboy

    gigaboy New Member

    Tried - still no go

    Thanks for your response.

    I did test connection using active FTP in Filezilla, and the connection was made.
    Then I did as you suggested and followed the docs located here:

    http://www.novell.com/coolsolutions/feature/19818.html (under firewall port config)

    and restarted the service twice, still no go. What else could keep this from working?
     
  4. gigaboy

    gigaboy New Member

    More

    Here's the IPconfig table from /etc/sysconfig (also did a service network restart command as well), still no go:

    # Firewall configuration written by system-config-securitylevel
    # Manual customization of this file is not recommended.
    *filter
    :INPUT ACCEPT [0:0]
    :FORWARD ACCEPT [0:0]
    :OUTPUT ACCEPT [0:0]
    :RH-Firewall-1-INPUT - [0:0]
    -A INPUT -j RH-Firewall-1-INPUT
    -A FORWARD -j RH-Firewall-1-INPUT
    -A RH-Firewall-1-INPUT -i lo -j ACCEPT
    -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
    -A RH-Firewall-1-INPUT -p 50 -j ACCEPT
    -A RH-Firewall-1-INPUT -p 51 -j ACCEPT
    -A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
    -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
    -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 20 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p udp --dport 21 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 110 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 143 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 14147 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 30000:50000 -j ACCEPT
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p udp --dport 30000:50000 -j ACCEPT
    -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
    COMMIT
     
  5. falko

    falko Super Moderator Howtoforge Staff

    Can you switch off the firewall for testing purposes? Does it work then?
     

Share This Page