profpd login failure

asdfasdfasdf · 08-13-2003, 12:45 PM

hey guys im running redhat 9.0 and i just installed proftpd im trying to get it running heres the deal if i ssh to my box as a root user it will let me login as ftpadmin when i type ftp localhost and try to ftp stuff it works

it lets me login even if i have wrong password

[root@localhost root]# ftp localhost
Connected to localhost (127.0.0.1).
220 FTP Server ready.
Name (localhost:root): root
331 Password required for root.
Password:
530 Login incorrect.
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

but when i logon using any other computer it wont let me connect to the ftp server at all

i am using all default configs

thank you in advance for your time and help =)

david_ross · 08-13-2003, 01:14 PM

How do you mean "not at all"? You don't get a login prompt?

Check your firewall and check that the srvice is listening on all ip addreses not just the loopback.

asdfasdfasdf · 08-13-2003, 01:17 PM

i dont get a login prompt it says connection failed when using wsftp client ona windows maching running xp i have the linux box as a dmz host but the linux firewall is set on medium

david_ross · 08-13-2003, 01:20 PM

Are you firewalling off port 21?
iptables -nL

Is proftpd running on all interfaces:
netstat -nlp

asdfasdfasdf · 08-13-2003, 01:43 PM

Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Lokkit-0-50-INPUT (2 references)
target prot opt source destination
ACCEPT udp -- 192.168.0.1 0.0.0.0/0 udp spt:53 dpts:1025
:65535
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x1
6/0x02
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:67:68 dpts:
67:68
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:67:68 dpts:
67:68
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 flag
s:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 flags:0
x16/0x02 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 reje
ct-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 reject-
with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6000:6009 f
lags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:7100 flags:0
x16/0x02 reject-with icmp-port-unreachable
[root@localhost root]# iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Lokkit-0-50-INPUT all -- 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Lokkit-0-50-INPUT (2 references)
target prot opt source destination
ACCEPT udp -- 192.168.0.1 0.0.0.0/0 udp spt:53 dpts:1025:65535
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:67:68 dpts:67:68
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spts:67:68 dpts:67:68
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 reject-with icmp-port-unreachable
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6000:6009 flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:7100 flags:0x16/0x02 reject-with icmp-port-unreachable
[root@localhost root]#

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 1588/
tcp 0 0 0.0.0.0:3784 0.0.0.0:* LISTEN 10350/ventrilo_srv
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1569/
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 11785/
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1704/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1777/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1738/
udp 0 0 0.0.0.0:32768 0.0.0.0:* 1588/
udp 0 0 0.0.0.0:916 0.0.0.0:* 1588/
udp 0 0 0.0.0.0:68 0.0.0.0:* 1488/dhclient
udp 0 0 0.0.0.0:111 0.0.0.0:* 1569/
udp 0 0 0.0.0.0:631 0.0.0.0:* 1777/cupsd
Active UNIX domain sockets (only servers)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 2 [ ACC ] STREAM LISTENING 2279 1757/gpm /dev/gpmctl

tahts what i get

asdfasdfasdf · 08-13-2003, 01:58 PM

is there anyway to check logs to see waht the proftpd logs say
my ftp client says connection failed =( but it works through ssh =(

thank you for your help

asdfasdfasdf · 08-13-2003, 02:07 PM

is there anything i have to change on the default config to work becuase ive tried default install on two redhat machines and i cant ftp to eitehr one of them using windows xp