cannot connect to ftp

Discussion in 'Installation/Configuration' started by denpark, Nov 7, 2011.

  1. denpark

    denpark New Member

    Greetings, everyone -

    Here's what I've been referencing:

    -I followed the directions from 'ubuntu server 11.10 with ISP config 3'.
    - read through the ispconfig 3 guide.

    Here's the situation:

    I am unable to connect to the ftp.
    I am using pureftp.

    so far, i've:

    -created the client
    -added the domain
    -added ftp user


    i tried using filezilla ftp client.

    (see attached the image to this message)


    Im running ispconfig 3.0.4 on Ubuntu server 11.10, on a dell t105.

    any suggestions?

    Thanks in advance!

    Dennis
     

    Attached Files:

  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the output of:

    netstat -tap | grep ftp

    and

    iptables -L
     
  3. denpark

    denpark New Member

    Hi till - thanks for the prompt response.



    netstat -tap | grep ftp:

    --------

    tcp 0 0 *:ftp *:* LISTEN 18254/pure-ftpd (SE
    tcp6 0 0 [::]:ftp [::]:* LISTEN 18254/pure-ftpd (SE

    --------


    iptables -L
    ----------------------------------------
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    fail2ban-courierimaps tcp -- anywhere anywhere multiport dports imaps
    fail2ban-courierimap tcp -- anywhere anywhere multiport dports imap2
    fail2ban-courierpop3s tcp -- anywhere anywhere multiport dports pop3s
    fail2ban-courierpop3 tcp -- anywhere anywhere multiport dports pop3
    fail2ban-pureftpd tcp -- anywhere anywhere multiport dports ftp
    fail2ban-sasl tcp -- anywhere anywhere multiport dports smtp
    fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain fail2ban-courierimap (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierimaps (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierpop3 (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierpop3s (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-pureftpd (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-sasl (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-ssh (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    ------
     
  4. denpark

    denpark New Member

    a few things to note:

    1) I am using dynamic dns - so i do not have a static ip address set for this server.
    my output of /etc/hosts:

    127.0.0.1 localhost.localdomain localhost
    127.0.1.1 server1.mydomain.com server1


    so, the ip address in Server Config Tab of the ispconfig app is:

    IP Address: 127.0.1.1

    2) all the domains i am adding to my client reside on the machine where ispconfig is installed.

    3) all the domains i am adding to my client have the same IP.

    ----------------

    Two observations:

    1) i cannot ping any added domains from an external machine. only internally.
    2) i can access the all the added domains from a browser externally.
    3) i can access the main server via ssh.

    Thanks in advance!
     
  5. denpark

    denpark New Member

    One more tidbit:

    I have no configuration entries in the DNS Zones tab.

    Given what I've mentioned previously,..do I need anything here?
     
  6. denpark

    denpark New Member

  7. falko

    falko Super Moderator Howtoforge Staff

    Please use the IP address that is allocated to eth0. You should also update /etc/hosts with this IP.

    Is this a physical server or a virtual machine?
     
  8. denpark

    denpark New Member

    Hi Falko -

    Thanks for your response. This is a physical machine, not a vm.

    So, in /etc/hosts, I will replace 127.0.1.1 with the ip address that is allocated to eth0 -- the one that is shown when i run ifconfig.

    is that the only file that i change?
     
  9. denpark

    denpark New Member

    I changed the IP in /etc/hosts -- still no luck -- i am getting the same behavior.
     
  10. denpark

    denpark New Member

    Another observation --

    I looked at the dbispconfig database and then at the ftp_user table and notice that no users were added to the table --also, the shell_users table is empty as well. (i added a shell user too and that was also not working).

    from what i've read in the config files in /etc/pure-ftpd/conf, the pureftpdb looks at this database.


    two questions --
    1) could this be the root cause of the problem?
    2) what would cause ftp users from being added to the ftp_users table? if this is empty, then from what table is the ispconfig admin gui getting the information from to display in the gui? it seems there might be a disconnect here.

    thanks in advance,
    Dennis
     
  11. falko

    falko Super Moderator Howtoforge Staff

    Yes.

    Are your database details in /usr/local/ispconfig/server/lib/config.inc.php and /usr/local/ispconfig/interface/lib/config.inc.php correct?
     
  12. denpark

    denpark New Member

    Falko - Thanks for the reply. While I didn't see any obvious mistakes in the details,..there were a few things that I observed. Please see below.


    here is what i am look at in 'usr/local/ispconfig/server/lib/config.inc.php'

    starting at line 63

    //**Database
    $conf['db_type'] = 'mysql';
    $conf['db_host'] = 'localhost';
    $conf['db_database'] = 'dbispconfig';
    $conf['db_user'] = 'ispconfig';
    $conf['db_password'] = '~';
    $conf['db_charset'] = 'utf8'; // same charset as html-charset - (HTML --> MYSQL: "utf-8" --> "utf8", "iso-8859-1" --> "latin1")
    $conf['db_new_link'] = false;
    $conf['db_client_flags'] = 0;


    here is what i observed:
    i looked at the user table of the running mysql instance db and at the user table for the ispconfig entry. I see that in the ispconfig entry, all the *_priv columns are set to 'N'.


    Question --
    1) Could that be the problem?
    2) How to remedy?
    3) where in the setup did I go wrong for it to be this way?

    4) is the mysql user that is set in the config -- 'ispconfig' the correct user? I see that root user and the sys maintenance users are the only ones where the _priv columns are set to 'Y'.

    Thanks in advance,
    Dennis
     
  13. till

    till Super Moderator Staff Member ISPConfig Developer

    1) No, thats not related. The permissions of the ispconfig user are defined in the db table, not the user table. All mysql users that have only access to a specific database like the ispconfig user have their permissions set to "N" in user table and to "Y" in db table.

    2) Test the login for the ispconfig mysql user:

    mysql -u ispconfig -p dbispconfig

    the command will ask you then for password. Please specify the exact password from the config.inc.php file.

    4) The user ispconfig is the correct user and the permissions you describe are correct for the ISPCOnfig user. It is required that the priv columns are set to 'N' for the ispconfig user in the user table.
     
  14. denpark

    denpark New Member

    Hi Till - thanks for the response.

    I've tried logging into phpmyadmin with the user: ispconfig and was able to successfully login with access to the dbispconfig database.

    Any other suggestions?

    thanks,
    Dennis
     
  15. denpark

    denpark New Member

    As stated in earlier messages - shoudln't the table, ftp_users, be populated with the ftp_user? at least, that is what i observed in the:

    /usr/local/ispconfig/server/lib/config.inc.php

    file.

    so there must be some config gap here -- how to remedy this?
     
  16. till

    till Super Moderator Staff Member ISPConfig Developer

    As the FTP user is missing in the ftp_user table, it must be missing in ispconfig as well. FTP will not work until there is a FTP user, login to ispconfig and create the FTP user again and check if you get any errors displayed, as the FTP user is only created if you dont get a error.
     
  17. denpark

    denpark New Member

    Hi Till -- yes, i do see the ftp users there - that must have been a mistake on my part. I double checked and i do see the user there.

    so then how can i troubleshoot this issue of the ftp user not being able to log into the system?

    thanks in advance,
    Dennis
     
  18. till

    till Super Moderator Staff Member ISPConfig Developer

  19. denpark

    denpark New Member

    RESOLVED!

    after double checking everything, I finally got around to checking my router.

    I'm embarrassed to admit it, but seems like it was a firewall problem!

    my home router's port was not open for 8080 and the ftp ports. only ssh and 80.

    lesson for me - double check the obvious things first! - thanks for your help everyone!

    :D
     

Share This Page