PROBLEM Enable Passive FTP on my PROFTPD server

Madcow_TheFirst · 10-24-2009, 06:38 PM

version ProFTPD 1.3.3rc2

INTERNET -> SpeedTouch 716 ( 192.168.1.254 ) -> Linux OpenSUSE 10.3 server with IPtables firewall ( 192.168.1.121 )

I forwarded the ports 20,21 3000-3020 in my SpeedTouch modem to 192.168.1.121.

My proftpd.conf

ServerName "ProFTPD servert"
ServerType standalone
#DefaultServer on
PassivePorts 3000 3020
MasqueradeAddress XXX.XXXX.XXX.XXX
#SocketBindTight on
DefaultAddress 192.168.1.121
#IdentLookups off
#UseReverseDNS off
# Port 21 is the standard FTP port.
Port 21

When I check with GRC ( ShieldsUp ) I see that the ports are not firewalled anymore.
(20, 21 are open , 3000-3020 are closed )

I'm running an Iptables firewall on my server, created rules to allow traffic go through the ports 20,21 3000-3020.

But I still cannot create a passive ftp connections to my FTP server

When testing with http://www.01ftp.com/index.php I get this error

Unable to switch to the passive mode on FTP server www.dikkevettemeuk.org.

I then see this in my proftpd log.

192.168.1.121 (174.36.146.89[174.36.146.89]) - mod_cap/1.0: capabilities '= cap_net_bind_service,cap_audit_write+ep'
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching POST_CMD command 'PASS (hidden)' to mod_delay
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching POST_CMD command 'PASS (hidden)' to mod_log
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching POST_CMD command 'PASS (hidden)' to mod_ls
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching POST_CMD command 'PASS (hidden)' to mod_auth
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching POST_CMD command 'PASS (hidden)' to mod_xfer
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching POST_CMD command 'PASS (hidden)' to mod_core
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching LOG_CMD command 'PASS (hidden)' to mod_log
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching LOG_CMD command 'PASS (hidden)' to mod_auth
192.168.1.121 (174.36.146.89[174.36.146.89]) - USER usa: Login successful.
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching PRE_CMD command 'PASV' to mod_core
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching PRE_CMD command 'PASV' to mod_core
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching CMD command 'PASV' to mod_core
192.168.1.121 (174.36.146.89[174.36.146.89]) - in dir_check_full(): path = '/', fullpath = '/srv/ftp/ftp_dirs/usa/'.
192.168.1.121 (174.36.146.89[174.36.146.89]) - Entering Passive Mode (XXX,XXX,XXX,XXX,11,188).
192.168.1.121 (174.36.146.89[174.36.146.89]) - dispatching LOG_CMD command 'PASV' to mod_log
192.168.1.121 (174.36.146.89[174.36.146.89]) - FTP session closed.

Entering Passive Mode (XXX,XXX,XXX,XXX,11,188)

This looks good to me, 118256 + 188 = 3004 ( that is a port that I configured to be passive )

Anybody any ideas?

Thanks in advance!