LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 06-30-2012, 07:51 AM   #1
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Rep: Reputation: 0
FTP returns error


Hi all,

Oddly, at the same time FTP stopped working when I tried to log in. Each time, it returns the following error:

-------
Status: Connecting to xxx.xxx.xx.xxx...
Response: fzSftp started
Command: open "user@xxx.xxx.xx.xxx" 22
Command: Pass: ************
Status: Connected to xxx.xxx.xx.xxx
Error: Connection closed by server with exitcode 127
Error: Could not connect to server
-------

I have tried to FTP using different users and restart the server to to avail.

The only significant change I have made to the server recently is to change the MySQL password.

Any ideas as to what could be causing this?
 
Old 06-30-2012, 07:59 AM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670
Try connecting with "sftp -vv <user>@<hostname>" for more verbose messages.
Make sure that the sshd service is running on the server.
 
1 members found this post helpful.
Old 06-30-2012, 09:16 AM   #3
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Original Poster
Rep: Reputation: 0
thanks for your suggestion jschiwal - do i need to introduce that command using SSH/Putty? I have been using FileZilla FTP to connect
 
Old 06-30-2012, 09:37 AM   #4
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
Yes, sftp command is from CLI (command line) like you wrote, in SSH/Putty.

Probably that's not what you are using to do FTP (you wrote FileZilla).

And since you're using FileZilla FTP server (regarding response: fzSftp started), there is a FileZilla forum for troubleshooting.
and more of it, you also didn't wrote your System and which FTP server software you are using,

so if you want help, please write your configurations/system/software to get help, otherwise we (members of LQ) can only guess what is wrong.

good luck

Last edited by lithos; 06-30-2012 at 09:38 AM.
 
Old 06-30-2012, 10:26 AM   #5
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Original Poster
Rep: Reputation: 0
thanks lithos. I'm a newbie so i don't know how where to find this information. I have been able to connect to the server using FileZilla before so i dont think the problem is with FileZilla. I'm actually experiencing issues with my website too (users are not able to login).

System: CentOS 5.3

FTP daemon: I cant find any daemons running which contain the word FTP when i type "#ps -al". I believe i should see something like vsftpd or Twoftpd but there is no such process running. There is definitely some daemon installed since i have connected using FTP various times before. How can i find this information?

Configurations: I'm not sure what you mean by this.

Last edited by funnyman; 06-30-2012 at 10:34 AM. Reason: clarification
 
Old 06-30-2012, 10:32 AM   #6
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Original Poster
Rep: Reputation: 0
Typing "sftp -vv <user>@<hostname>" as suggested by jschiwal returns:

#command-line: line 0: Bad configuration option: PermitLocalCommand
 
Old 06-30-2012, 12:48 PM   #7
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
quickly:
Code:
# service vsftpd status
if returns "running..." then it's vsFTPd.

Configurations:
- vsftpd configuration : /etc/vsftpd/vsftpd.conf
- firewall configuration: probably "iptables" (# iptables -nL) , could be it's not opened for FTP passive ports (not 21) or something else is going on...
 
1 members found this post helpful.
Old 06-30-2012, 01:59 PM   #8
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Original Poster
Rep: Reputation: 0
lithos

# service vsftpd status

returns: "vsftpd: unrecognized service"
Directory vsftpd configuration : /etc/vsftpd/ does not exist either.
 
Old 07-01-2012, 06:13 AM   #9
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
Hi,

if there is no vsFTP then I can't say what service it is, try as 'root':
Code:
root@~#>netstat -tapln
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      2251/mysqld
tcp        0      0 127.0.0.1:53                0.0.0.0:*                   LISTEN      14235/named
tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN      25308/vsftpd
if this shows you any service name listening on port 21 (ftp), which one is it?
 
1 members found this post helpful.
Old 07-01-2012, 09:11 PM   #10
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,241

Rep: Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325Reputation: 2325
As you are running Centos, lets check what's installed
Code:
rpm -qa|grep -i ftp

ls /etc/init.d

chkconfig --list|grep -i ftp
and go from there
 
1 members found this post helpful.
Old 07-02-2012, 07:46 AM   #11
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670
The server may be using ssh's ftp server rather than vsftp. Putty has an sftp client. Use that if since you have putty. You could also run linux using a live CD and use the openssh sftp client. Check if putty's sftp client has a verbose option is you use that.

If you can log into the server, check the logs in /var/log/. messages or secure or auth may contain info if you have an authentication problem.
 
1 members found this post helpful.
Old 07-02-2012, 02:33 PM   #12
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Original Poster
Rep: Reputation: 0
Hi guys,

Thank you for all your help - it is much appreciated. After using lithos' "#netstat -tapln" I realised that there were 4/5 IP addresses from corners of the world that had no reason to be connected to my server so I hired a system administrator to take a look and he confirmed my suspicions - my SSH was hacked and this is why FTP strangely stopped working.

I'll have to format the server and start again or move elsewhere.

I know this is off-topic but can anybody recommend a decent managed server with UK/EU data servers for under 180 (inc. VAT)? I'm thinking it'll be better to have a professional looking after the site from now on.
 
Old 07-02-2012, 03:31 PM   #13
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
Hi,

I'm sorry to read you had been hacked, but also glad you found it.
Since I'm not anywhere near UK I can't suggest you any hosting, sorry.

But if you will stay on the server and start setting all over again, try first to find how to securing SSH, then disabling unwanted domains to connect and enabling only your IP's.

It's an everyday job for system administrators to block the attacks from breaking in and securing as much as possible for a good night sleep.
 
1 members found this post helpful.
Old 07-02-2012, 03:37 PM   #14
funnyman
LQ Newbie
 
Registered: May 2012
Posts: 11

Original Poster
Rep: Reputation: 0
Thanks again Lithos. Luckily I’d only just started when this happened and didn’t have any sensitive information on the server so no real damage was done. For now, I think I’m better off with a professional looking after things to ensure business continuity.

Thank you for your links nonetheless; if I pick up another VPS for a smaller project, I’ll be sure to use the information you provided to add additional layers of security.
 
Old 07-02-2012, 03:40 PM   #15
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
May I add you another point of RHEL administration guide for that reason,
a sh*tload of information to read and learn.

Good luck,

Best Regards
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Php returns this error adrianc.grigoras Linux - Software 1 02-22-2009 10:53 PM
apache 1.3.27, https url returns error -12263 in Firefox, fatal error (40) in Opera leo22838 Linux - Server 0 04-04-2008 02:51 PM
SWIG wrap.c file returns error: struct_vector_wrap.c:2413: error: dereferencing point varun_shrivastava Programming 0 05-25-2007 05:47 AM
FTP returns an error 8, corrupts file gatsby Linux - Software 2 01-18-2006 01:32 PM
XConfigurator returns error yodathecoda Linux - Newbie 2 08-09-2004 05:07 PM


All times are GMT -5. The time now is 01:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration