vsftpd troubles

linuxlastslonge · 08-12-2004, 10:49 AM

okay.... i have vsftpd-1.1.3-8 installed that i got via apt-rpm on RH Enterprise WS. i'm having trouble with it, though. i can login via ftp just fine, run pwd to view my working directory, switch to binary mode, but when i got to put,get, or ls, i get the following error:

Code:

227 Entering Passive Mode (216,37,37,33,83,142)
ftp: connect: No route to host

here's my config file, vsftpd.conf:

Code:

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
idle_session_timeout=600
data_connection_timeout=120
ftpd_banner=Welcome to MYSERVER FTP service.
pam_service_name=vsftpd
userlist_enable=YES
listen=YES
tcp_wrappers=YES
port_enable=YES
pasv_enable=YES

any help, please???

thanks.

ilikejam · 08-12-2004, 11:11 AM

Hi.

Sounds like you'll have to punch a hole in your firewall. You'll need ports 20 and 21 open.

Dave

linuxlastslonge · 08-12-2004, 11:15 AM

you know what's funny, i have 20 and 21 open.

iptables --list

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere           icmp any
ACCEPT     ipv6-crypt--  anywhere             anywhere
ACCEPT     ipv6-auth--  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere           state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:webcache
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:10000
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere           state NEW tcp dpt:ftp-data
REJECT     all  --  anywhere             anywhere           reject-with icmp-host-prohibited

thanks.

ilikejam · 08-12-2004, 11:28 AM

OK. Have a look here:
http://66.102.11.104/search?q=cache:...+to+host&hl=en

Dave

linuxlastslonge · 08-12-2004, 01:32 PM

thanks... i'll try that out and let you know how it goes.

linuxlastslonge · 08-12-2004, 01:57 PM

thanks for the help. i ran:

Code:

modprobe ip_conntrack_ftp

thanks again!!!!!!!!!!!