LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS
User Name
Password
CentOS This forum is for the discussion of CentOS Linux. Note: This forum does not have any official participation.

Notices


Reply
  Search this Thread
Old 10-17-2016, 10:22 PM   #1
zimbot
Member
 
Registered: Nov 2005
Location: cincinnati , ohio . USA
Distribution: ubuntu , Opensuse , CentOS
Posts: 169

Rep: Reputation: 17
ftp server not excepting connections


I have a situation where I am hoping someone can help me see what I am missing.

I have a centos 7 64 server, web and ftp
This machine is located behind a pix firewall.
I have holes poked in the firewall ( eq ftp & eq www & icmp (ping) )
This server replaced a ol centos 5.8 machine that finally gave out.

The ip num is the same as the old server - it worked.

It almost "behaves" like it is *not have acl holes in the pix firewall.

if I am "inside" my network - inside the pix firewall . I can ftp to it.
but outside the firewall - i cannot ping , nor ftp to it.

I do a sho conf on the pix firewall --yep acl holes poked.

what could it be?
 
Old 10-18-2016, 03:21 AM   #2
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 2,880

Rep: Reputation: 1164Reputation: 1164Reputation: 1164Reputation: 1164Reputation: 1164Reputation: 1164Reputation: 1164Reputation: 1164Reputation: 1164
Quote:
Originally Posted by zimbot View Post
what could it be?
Could be iptables firewall running on the new server.
 
Old 10-18-2016, 06:56 AM   #3
rkelsen
Senior Member
 
Registered: Sep 2004
Distribution: slackware
Posts: 2,194

Rep: Reputation: 538Reputation: 538Reputation: 538Reputation: 538Reputation: 538Reputation: 538
ftp server not excepting connections

port forwarding?
 
Old 10-20-2016, 12:11 PM   #4
zimbot
Member
 
Registered: Nov 2005
Location: cincinnati , ohio . USA
Distribution: ubuntu , Opensuse , CentOS
Posts: 169

Original Poster
Rep: Reputation: 17
in regard to is my firewall on or iptables
I think firewall and iptables are OFF.
but ... maybe I am wrong

here is this - which I think* proves FW / iptables is not part of the situation



systemctl disable firewalld



[pps@mixer ~]$ systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
Active: inactive (dead)

Oct 14 15:43:37 mixer.theppsgroup systemd[1]: Stopped firewalld - dynamic firew....
Oct 14 17:29:56 mixer.theppsgroup systemd[1]: Stopped firewalld - dynamic firew....
Oct 14 17:31:27 mixer.theppsgroup systemd[1]: Stopped firewalld - dynamic firew....
Hint: Some lines were ellipsized, use -l to show in full.



[root@mixer pps]# service iptables stop
Redirecting to /bin/systemctl stop iptables.service
Failed to stop iptables.service: Unit iptables.service not loaded.
[root@mixer pps]#



I am wondering if ... it could be something regarding chroot - or - passive vs active ftp

I think vsftp is configured to use active mode by default


could it be that i need to

http://www.itzgeek.com/how-tos/linux...nd-winscp.html

Configure FTP server in passive mode:

In this case, you do not require to modify FileZilla. Change vsftp transfer mode from active to passive, edit the configuration file of ftp server

# vi /etc/vsftpd/vsftpd.conf

Add the following lines at the end of the file.

pasv_enable=Yes
pasv_max_port=40000
pasv_min_port=40000

Restart the service.

# systemctl restart vsftpd.service


and then I poke hole in my pix515e firewall

for 40000
-????? maybe I will try that.

also i am thinking having the Servers iptables & firewall OFF is ok... it is behind a cisco pix515e firewall


but--- i would be happy to hear from others who might have wisdom.

thnks!

jims
 
Old 10-20-2016, 06:01 PM   #5
rkelsen
Senior Member
 
Registered: Sep 2004
Distribution: slackware
Posts: 2,194

Rep: Reputation: 538Reputation: 538Reputation: 538Reputation: 538Reputation: 538Reputation: 538
Quote:
Originally Posted by zimbot View Post
and then I poke hole in my pix515e firewall

for 40000
OK, but is that port being forwarded to the IP address of the computer you're trying to reach?
 
Old 10-21-2016, 04:30 PM   #6
zimbot
Member
 
Registered: Nov 2005
Location: cincinnati , ohio . USA
Distribution: ubuntu , Opensuse , CentOS
Posts: 169

Original Poster
Rep: Reputation: 17
port forwarding?????????
I do not think so.
there is no forwarding at the switch..

how could i check?
how would i know?
 
Old 10-21-2016, 09:13 PM   #7
rkelsen
Senior Member
 
Registered: Sep 2004
Distribution: slackware
Posts: 2,194

Rep: Reputation: 538Reputation: 538Reputation: 538Reputation: 538Reputation: 538Reputation: 538
Log into your router and look in the port forwarding section.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Block ftp connections from some server inifinity Linux - Certification 1 04-02-2015 07:37 AM
LXer: Setup FTP server using VsFtp and Configure Secure FTP connections on Ubuntu 14.04 Server LXer Syndicated Linux News 0 08-20-2014 07:00 PM
server 12.04 not excepting connections, not responding to arp requests gobo7 Ubuntu 8 11-22-2012 04:15 AM
[SOLVED] FTP concurrent connections on RHEL 5.2 server it_guy Red Hat 2 04-20-2011 09:36 PM
routing ftp connections to internal server? steepcreep Linux - Networking 1 02-18-2004 02:29 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS

All times are GMT -5. The time now is 08:26 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration