wu-ftp

codewize · 11-12-2002, 10:08 AM

port 21 is open but wu-ftpd stops answering login requests. RH 7.2, wu-ftpd-2.6.1-20

unSpawn · 11-12-2002, 10:39 AM

Posting a terse question like this isn't usefull, please try to include as much info if you can.

Check your ftp daemons verbose/debug/error log output, your firewall policy/rules, TCP Wrappers and (x)inetd config if run from (x)inetd, your ftp client (passive ftp?), and include any logs/configs necessary.

codewize · 11-12-2002, 11:58 AM

That's the thing. All of a sudden we start getting calls from customers that they can't ftp. there is nothing strange in the logs. No wrappers and no iptables, chains etc. It just stops. we restart xinetd and its fine for an indefinite amount of time. I havn't had a chance to dump the traffic yet because we have no forwarning of what triggers this. Also there is no special or custom config in place. This thing has been running for almost 2 years without trouble.

Thanks in advance for the help
Aaron

unSpawn · 11-12-2002, 04:37 PM

Anything upgraded or changed? Ran a check on binaries' integrity by any chance? Maybe test ftp'ing yourself and stracing wu?

codewize · 11-12-2002, 08:53 PM

I'm now running tcpdump 'port 21 or 20' > ftpdump &. This way when the server stops I can go back and look at the events just before. Ill keep you posted if your interested.

unSpawn · 11-13-2002, 05:35 AM

Please do, I'm always interested in fixing things, but the *method* (ie your troubleshooting procedures) is more interesting to me.

codewize · 11-25-2002, 01:00 PM

We are still working on this with a team from security focus