Need to force Proftp in passive mode by default

mago · 05-10-2006, 12:16 PM

Hello again,

I have a problem with proftpd (1.3.0), I need to start it in passive mode but the PassivePorts directive in the proftpd.conf doesn't do the trick.

Ok here is the scenario, I set up a ring of 42 servers with several sites on each server, the apache is generating independent logs for each server and we bought a dynamic software that will retrive the logs and analize them by prefix(site), now the darn software connects through ftp but doesn't handle active mode transfer and I cannot force it to send the passive command so I need to set the proftp as passive by default. I google quite a bit and I read all the directives for the proftpd.conf and I found nothing.

Any idas, hits, suggestions are more than welcome.

Thanks in advanced.

By the way, there is not a port problem. I'm pretty sure that security/port issue has been looked upon carefully, even doe all suggestions welcome.

tomdkat · 05-10-2006, 07:28 PM

Hmm.. that's a tough one since the PASV command is sent by the FTP client to the server and the server responds accordingly.

Have you tried asking this on the ProFTPd mailing list? I think the developers monitor that list.

Peace...

mago · 05-11-2006, 11:05 AM

Hmm, that is actually a great suggestion.
Thanks, kind of slow these days.

tomdkat · 05-11-2006, 12:06 PM

Quote:

Originally Posted by mago

Hmm, that is actually a great suggestion.

Yeah, when I have a problem with a particular app, I tend to read the mailing list and forums for that app before coming to a generic forum, like this one.

I've posted on the ProFTPd list in the past and got my issues addressed. I can't guarantee someone will tell you how to do what you need but you should be able to get more pertinent info regarding the feasibility of what you're wanting to do.

Good luck!

Peace...

tomdkat · 05-11-2006, 06:38 PM

Looks like a possible solution was posted to you on the ProFTPd mailing list.

Peace...

mago · 05-11-2006, 06:42 PM

Yes thanks, I got the mail.

win32sux · 05-11-2006, 06:43 PM

if the suggestion works, please share it with us!!!

tomdkat · 05-11-2006, 08:27 PM

Quote:

Originally Posted by mago

Yes thanks, I got the mail.

Great! Be sure to report back on the list.

Quote:

Originally Posted by win32sux

if the suggestion works, please share it with us!!!

Be sure to read the thread on the ProFTPd mailing list archive.

Since the solution hasn't been posted to the archive yet, I'll post it here:

Quote:

Originally Posted by ProFTPd mailing list

> I need to set the passive mode on the proftpd server as default, but as
> > far as I have been able to read on the internet and the docs on the
> > www.proftpd.org there is not such an option. I wonder if there is some
> > sort of work around that can do the trick.
> >
> > I'm currently running 1.3.0 and the problem is that certain automated
> > ftp client that I do not have control can access the server in passive
> > mode but I cannot force it to send the command.

Unfortunately there is no way to set a default for this. Whether the data
transfer is to be active or passive is, by RFC, left to the client to
specify.

At most, you can configure proftpd to use active data transfers only by
denying the PASV commands from clients, e.g.:

<Limit EPSV PASV>
DenyAll
</Limit>

Alternatively, you can cause proftpd to use passive data transfers only:

<Limit EPRT PORT>
DenyAll
</Limit>

However, I'm not sure that either of these configurations will help in
your situation.

TJ

There might be follow-on discussion in that mailing list thread, which is why you should either subscribe to the mailing list or monitor the archives.

Peace...