Dear, I have ubuntu 14.04 and ispconfig 3 (perfect server), now from two days I can't login via ftp and I can't understand what wrong before my ftp serve worked very fine. iptables -L: root@dns2:~# iptables -L Chain INPUT (policy DROP) target prot opt source destination DROP tcp -- anywhere 127.0.0.0/8 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere DROP all -- base-address.mcast.net/4 anywhere PUB_IN all -- anywhere anywhere PUB_IN all -- anywhere anywhere PUB_IN all -- anywhere anywhere PUB_IN all -- anywhere anywhere PUB_IN all -- anywhere anywhere DROP all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED DROP all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination PUB_OUT all -- anywhere anywhere PUB_OUT all -- anywhere anywhere PUB_OUT all -- anywhere anywhere PUB_OUT all -- anywhere anywhere PUB_OUT all -- anywhere anywhere Chain INT_IN (0 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere DROP all -- anywhere anywhere Chain INT_OUT (0 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere ACCEPT all -- anywhere anywhere Chain PAROLE (16 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain PUB_IN (5 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp echo-request PAROLE tcp -- anywhere anywhere tcp dpt:ftp-data PAROLE tcp -- anywhere anywhere tcp dpt:ftp PAROLE tcp -- anywhere anywhere tcp dpt:ssh PAROLE tcp -- anywhere anywhere tcp dpt:smtp PAROLE tcp -- anywhere anywhere tcp dpt:domain PAROLE tcp -- anywhere anywhere tcp dpt:http PAROLE tcp -- anywhere anywhere tcp dptop3 PAROLE tcp -- anywhere anywhere tcp dpt:imap2 PAROLE tcp -- anywhere anywhere tcp dpt:https PAROLE tcp -- anywhere anywhere tcp dpt:submission PAROLE tcp -- anywhere anywhere tcp dpt:imaps PAROLE tcp -- anywhere anywhere tcp dptop3s PAROLE tcp -- anywhere anywhere tcp dpt:mysql PAROLE tcp -- anywhere anywhere tcp dpt:http-alt PAROLE tcp -- anywhere anywhere tcp dpt:tproxy PAROLE tcp -- anywhere anywhere tcp dpt:webmin ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:mysql DROP icmp -- anywhere anywhere DROP all -- anywhere anywhere Chain PUB_OUT (5 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain fail2ban-dovecot-pop3imap (0 references) target prot opt source destination RETURN all -- anywhere anywhere Chain fail2ban-postfix-sasl (0 references) target prot opt source destination RETURN all -- anywhere anywhere Chain fail2ban-pureftpd (0 references) target prot opt source destination RETURN all -- anywhere anywhere Chain fail2ban-ssh (0 references) target prot opt source destination RETURN all -- anywhere anywhere and netstat -tap: root@dns2:~# netstat -tap Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 dns2.vccoins.org:10022 *:* LISTEN 14752/pure-ftpd (ID tcp 0 0 localhost:10024 *:* LISTEN 1572/amavisd-new (m tcp 0 0 dns2.vccoins.org:10025 *:* LISTEN 14763/pure-ftpd (ID tcp 0 0 localhost:10025 *:* LISTEN 2342/master tcp 0 0 *:mysql *:* LISTEN 1032/mysqld tcp 0 0 *:submission *:* LISTEN 2342/master tcp 0 0 localhost:11211 *:* LISTEN 2234/memcached tcp 0 0 *op3 *:* LISTEN 952/dovecot tcp 0 0 *:imap2 *:* LISTEN 952/dovecot tcp 0 0 dns2.vccoins.org:10033 *:* LISTEN 14688/pure-ftpd (ID tcp 0 0 *:urd *:* LISTEN 2342/master tcp 0 0 dns2.vccoins.org:domain *:* LISTEN 1446/named tcp 0 0 localhost:domain *:* LISTEN 1446/named tcp 0 0 *:ftp *:* LISTEN 3239/pure-ftpd (SER tcp 0 0 dns2.vccoins.org:10070 *:* LISTEN 14785/pure-ftpd (ID tcp 0 0 *:ssh *:* LISTEN 942/sshd tcp 0 0 dns2.vccoins.org:10041 *:* LISTEN 14748/pure-ftpd (ID tcp 0 0 localhost:953 *:* LISTEN 1446/named tcp 0 0 *:smtp *:* LISTEN 2342/master tcp 0 0 *:imaps *:* LISTEN 952/dovecot tcp 0 0 dns2.vccoins.:amidxtape *:* LISTEN 14782/pure-ftpd (ID tcp 0 0 *op3s *:* LISTEN 952/dovecot tcp 0 0 dns2.vccoins.org:ssh 10.1.128.194:62858 ESTABLISHED 14880/4 tcp 0 0 localhost:mysql localhost:47588 ESTABLISHED 1032/mysqld tcp 1 0 dns2.vccoins.org:ftp 37.227.17.56:31682 CLOSE_WAIT 14782/pure-ftpd (ID tcp 1 0 dns2.vccoins.org:ftp 37.227.17.56:30912 CLOSE_WAIT 14748/pure-ftpd (ID tcp 0 0 dns2.vccoins.org:ssh 10.1.128.194:62170 ESTABLISHED 13496/0 tcp 1 0 dns2.vccoins.org:ftp 37.227.17.56:31809 CLOSE_WAIT 14785/pure-ftpd (ID tcp 1 0 dns2.vccoins.org:ftp 37.227.17.56:31042 CLOSE_WAIT 14688/pure-ftpd (ID tcp 1 0 dns2.vccoins.org:ftp 37.227.17.56:32384 CLOSE_WAIT 14763/pure-ftpd (ID tcp 1 0 dns2.vccoins.org:ftp 37.227.17.56:32192 CLOSE_WAIT 14752/pure-ftpd (ID tcp 0 0 localhost:47588 localhost:mysql ESTABLISHED 10566/amavisd-new ( tcp 0 0 localhost:mysql localhost:47160 ESTABLISHED 1032/mysqld tcp 0 0 localhost:47160 localhost:mysql ESTABLISHED 5786/amavisd-new (c tcp 0 296 dns2.vccoins.org:ssh 10.1.128.194:63014 ESTABLISHED 15054/5 tcp6 0 0 [::]:submission [::]:* LISTEN 2342/master tcp6 0 0 [::]op3 [::]:* LISTEN 952/dovecot tcp6 0 0 [::]:imap2 [::]:* LISTEN 952/dovecot tcp6 0 0 [::]:http-alt [::]:* LISTEN 2489/apache2 tcp6 0 0 [::]:http [::]:* LISTEN 2489/apache2 tcp6 0 0 [::]:tproxy [::]:* LISTEN 2489/apache2 tcp6 0 0 [::]:urd [::]:* LISTEN 2342/master tcp6 0 0 [::]:domain [::]:* LISTEN 1446/named tcp6 0 0 [::]:ftp [::]:* LISTEN 3239/pure-ftpd (SER tcp6 0 0 [::]:ssh [::]:* LISTEN 942/sshd tcp6 0 0 localhost:953 [::]:* LISTEN 1446/named tcp6 0 0 [::]:smtp [::]:* LISTEN 2342/master tcp6 0 0 [::]:https [::]:* LISTEN 2489/apache2 tcp6 0 0 [::]:imaps [::]:* LISTEN 952/dovecot tcp6 0 0 [::]op3s [::]:* LISTEN 952/dovecot tcp6 0 0 dns2.vccoins.org:http crawl-66-249-64-2:40633 ESTABLISHED 4721/apache2 I hope little help. Best regards.
Try to define the passive port range in pure-ftpd and then open the same passive ports in the firewall: http://www.faqforge.com/linux/contr...ange-in-pure-ftpd-on-denian-and-ubuntu-linux/
Dear till, perfect, now my ftp works fine, your help my proplems has 100% success. Sorry little problem, now if I use internal IP I can't connect, but with external ip or domain I have't problem. How resolve this little problem. Regards
The problem is that your router seems to block internal traffic to the external IP. Either you have to reconfigure your router to allow such connects or you use active FTP mode when you connect from inside your local network instead of passive mode.
