Problem login FTP/SSH

rizwan65 · 04-13-2011, 03:36 AM

Hi
I have a VPS with CentOS 5 installed and Kloxo v-6.1.4 as CP

Suddenly I am not able to login FTP and SSH

On FTP client I get the error: Could not connect to server
And
On Putty
Server unexpectedly closed the network connection

I have checked the /var/log/secure and /var/log/messages

The error details pasted below:
Any suggestion will be appreciated

/var/log/secure:

Quote:

Apr 12 08:21:15 lx2 sshd[18376]: refused connect from ::ffff:my.ip (::ffff:my.ip)
Apr 12 08:21:55 lx2 webmin[20165]: Successful login as root from my.ip
Apr 12 08:23:52 lx2 sshd[28212]: refused connect from ::ffff:my.ip (::ffff:my.ip)
Apr 12 08:26:53 lx2 sshd[15446]: Received signal 15; terminating.
Apr 12 08:26:59 lx2 sshd[3591]: Server listening on :: port 22.
Apr 12 08:26:59 lx2 sshd[3591]: error: Bind to port 22 on 0.0.0.0 failed: Address already in use.
Apr 12 08:27:07 lx2 sshd[3715]: refused connect from ::ffff:my.ip (::ffff:my.ip)
Apr 12 08:29:08 lx2 sshd[12010]: refused connect from ::ffff:my.ip (::ffff:my.ip)
Apr 12 08:31:20 lx2 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 12 08:31:20 lx2 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 12 08:31:47 lx2 sshd[18147]: Did not receive identification string from UNKNOWN
Apr 12 08:32:00 lx2 sshd[19530]: refused connect from ::ffff:my.ip (::ffff:my.ip)
Apr 12 08:32:38 lx2 sshd[20123]: Did not receive identification string from UNKNOWN
Apr 12 08:32:39 lx2 sshd[20137]: refused connect from ::ffff:my.ip (::ffff:my.ip)

/var/log/messages

Quote:

Apr 12 08:51:20 lx2 xinetd[15596]: START: ftp pid=17448 from=127.0.0.1
Apr 12 08:51:20 lx2 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 12 08:51:20 lx2 xinetd[15596]: START: smtp pid=17450 from=127.0.0.1
Apr 12 08:51:20 lx2 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 12 08:51:20 lx2 xinetd[15596]: EXIT: ftp status=0 pid=17448 duration=0(sec)
Apr 12 08:51:20 lx2 xinetd[15596]: EXIT: smtp status=1 pid=17450 duration=0(sec)
Apr 12 08:51:39 lx2 xinetd[17832]: libwrap refused connection to ftp (libwrap=pure-ftpd) from my.ip
Apr 12 08:51:39 lx2 xinetd[17832]: FAIL: ftp libwrap from=my.ip
Apr 12 08:51:39 lx2 xinetd[15596]: START: ftp pid=17832 from=my.ip
Apr 12 08:51:39 lx2 xinetd[15596]: EXIT: ftp status=0 pid=17832 duration=0(sec)
Apr 12 08:51:45 lx2 xinetd[17922]: libwrap refused connection to ftp (libwrap=pure-ftpd) from my.ip
Apr 12 08:51:45 lx2 xinetd[17922]: FAIL: ftp libwrap from=my.ip
Apr 12 08:51:45 lx2 xinetd[15596]: START: ftp pid=17922 from=my.ip
Apr 12 08:52:05 lx2 xinetd[15596]: EXIT: ftp status=0 pid=17922 duration=20(sec)

chrism01 · 04-13-2011, 06:42 AM

Code:

Apr 12 08:51:45 lx2 xinetd[17922]: libwrap refused connection to ftp (libwrap=pure-ftpd) from my.ip

likely means your hosts.allow & hosts.deny files did not allow cxn from your machine. libwrap means tcp_wrappers http://itso.iu.edu/TCP_Wrappers is being used.

rizwan65 · 04-13-2011, 07:15 AM

Thanks for your reply
Well some on else also suggested me to check hosts.deny and I checked it and my IP and IP range is not listed there
And as I am connecting to ssh and FTP thru connection with dynamic IP and also tried to connect from different places but was not able to connect

chrism01 · 04-13-2011, 09:18 PM

Normally, hosts.deny is set to

Code:

ALL : ALL

ie deny everyone for everything everywhere, and then you open up just what's needed in hosts.allow.
Note that both ftp and ssh are compiled with libwrap .
You can check using these techniques http://www.cyberciti.biz/tips/how-to...cpwrapper.html and there's a good explanation of setting up TCP_Wrappers http://www.linuxtopia.org/online_boo...er-tcpw-xinetd.
Personally I bookmarked that entire docco.