I can not connect to my server adn there should not be any special reason.. I have googled and I havent find a good solution. I get connection error. Can someone help me and give me advise how to check this with logs etc etc. THx Ole
I am running Debian Jessie ISP config 3.1.15p3. This version I updated with some help a few weeks ago. I ma not sure if thisis the reason for the problem but thiw weekend I wanted to download some files.. some MB. This problem has very reason started and has not been a problem. I had initial some connection problems for a reason I ispprotect bandaemon was blocking the ip when we files was downloaded by ftp in active mode. I have been in contact with support adn service is turned of for some days so we can figure out this. I thought then that the problem was solved adn started downloaded a huge amount of files. THe ptfp service still crash and I cnat figure out why. In adition to the logs I in the ispconfig control panel it shows no services are runnign but web, mail, mysql and ftp as long as i restart it works. FTP server seems only to crash when I start downloading files., IN the logd I see this in ISPCONFIG System log: THis shows continously 2020-04-11 22:24 www.valueit-web.com Error httpd is down! Rescue will not help! 2020-04-11 22:24 www.valueit-web.com Error MySQL is down! Rescue will not help! System log: Apr 11 22:26:27 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 11 22:26:27 www pure-ftpd: ([email protected]) [INFO] New connection from 84.214.30.36 Apr 11 22:26:30 www postfix/smtpd[23585]: warning: hostname ip-38-83.ZervDNS does not resolve to address 92.118.38.83: Name or service not known Apr 11 22:26:30 www postfix/smtpd[23585]: connect from unknown[92.118.38.83] Apr 11 22:26:31 www postfix/smtpd[19067]: warning: unknown[45.133.99.10]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 11 22:26:32 www postfix/smtpd[19067]: lost connection after AUTH from unknown[45.133.99.10] Apr 11 22:26:32 www postfix/smtpd[19067]: disconnect from unknown[45.133.99.10] Apr 11 22:26:34 www postfix/smtpd[21041]: warning: unknown[45.142.195.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 11 22:26:35 www postfix/smtpd[21041]: disconnect from unknown[45.142.195.2] Apr 11 22:26:41 www postfix/smtpd[23585]: warning: unknown[92.118.38.83]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 11 22:26:41 www postfix/smtpd[23585]: disconnect from unknown[92.118.38.83] -----------------------------------
THank , I have turned off the rescue system and it naturally dont show the rescuw will not help. My ftp still seems to crash, I have in system setting turned on log to warning for debugging not only error. Should I look for someting special in the log files other than pure ftpd ? To findo out why ftp service is crashing? Thx
Ok I am not sure if.I have got any furter but I did this command as root. tail -100 /var/log/message I get this message out. Apr 12 11:17:01 www sa-update: Start SA-Update Apr 12 11:17:02 www sa-update: No SA-Update found Apr 12 11:25:26 www pure-ftpd: ([email protected]) [INFO] New connection from 167.71.47.25 Apr 12 11:25:26 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 11:25:33 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 11:25:33 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 11:25:34 www pure-ftpd: ([email protected]) [INFO] New connection from 167.71.47.25 Apr 12 11:25:34 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 11:25:40 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 11:25:40 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 11:25:41 www pure-ftpd: ([email protected]) [INFO] New connection from 167.71.47.25 Apr 12 11:25:41 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 11:25:46 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 11:25:46 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 11:25:47 www pure-ftpd: ([email protected]) [INFO] New connection from 167.71.47.25 Apr 12 11:25:47 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 11:25:55 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 11:25:55 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 11:37:24 www -- MARK -- Apr 12 11:57:24 www -- MARK -- Apr 12 12:07:24 www pure-ftpd: ([email protected]) [INFO] New connection from 68.66.224.3 Apr 12 12:07:25 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:07:30 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:07:30 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:07:31 www pure-ftpd: ([email protected]) [INFO] New connection from 68.66.224.3 Apr 12 12:07:32 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:07:37 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:07:37 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:07:38 www pure-ftpd: ([email protected]) [INFO] New connection from 68.66.224.3 Apr 12 12:07:39 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:07:44 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:07:44 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:07:45 www pure-ftpd: ([email protected]) [INFO] New connection from 68.66.224.3 Apr 12 12:07:46 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:07:51 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:07:51 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:17:01 www sa-update: Start SA-Update Apr 12 12:17:02 www sa-update: No SA-Update found Apr 12 12:32:23 www pure-ftpd: ([email protected]) [INFO] New connection from 139.129.97.206 Apr 12 12:32:24 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:32:30 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:32:31 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:32:32 www pure-ftpd: ([email protected]) [INFO] New connection from 139.129.97.206 Apr 12 12:32:32 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:32:39 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:32:40 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:32:41 www pure-ftpd: ([email protected]) [INFO] New connection from 139.129.97.206 Apr 12 12:32:42 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address Apr 12 12:32:50 www pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [%user%] Apr 12 12:32:50 www pure-ftpd: ([email protected]) [INFO] Logout. Apr 12 12:32:51 www pure-ftpd: ([email protected]) [INFO] New connection from 139.129.97.206 Apr 12 12:32:52 www pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address It seems for me that there are some issue ftp/mysql. I read this tread.. https://www.howtoforge.com/community/threads/pure-ftpd-mysql-authorisation-problem.46954/ I am not sure if I should try to reinstall the ftp server? I see Youbdabar suggest this. THE SOLUTION: pkill pure-ftpd configure your /etc/pure-ftpd/db/mysql.conf .. already head /etc/init.d/pure-ftpd-mysql start and connect your server via FTP Any thoughts? Ole
That log has entries with timestamps from Apr 12 11:17:01 to Apr 12 12:32:52. Are all the entries in that over an hour interval relevant to this case? Anyway, all login attempts shown fail with wrong password. Which IP numbers are the ones you tried to FTP to server? Have you verified you are using the correct user and password?
