proftpd problem with anonymous access on debian

Kaste · 07-12-2008, 10:42 AM

Hi

I use the following config

Code:

 cat proftpd.conf
#
# iNcludes required DSO modules. This is mandatory in proftpd 1.3
#
Include /etc/proftpd/modules.conf

ServerName                      "Norg"
ServerType                      standalone
DeferWelcome                    off

ShowSymlinks                    on
multilineRFC2228                on
DefaultServer                   on
AllowOverwrite                  on

ServerIdent     on      "Norgs ftp server"
MaxClientsPerHost 2 "2 logins only sorry"
AllowStoreRestart               on

#faster?
#UseReverseDNS                  off
#Looks up DNS records for the ips when writing logs
UseReverseDNS                   on

TimeoutNoTransfer               600
TimeoutStalled                  600
TimeoutIdle                     1200

DisplayLogin                    welcome.msg
ListOptions                "-l"

DenyFilter                      \*.*/

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd               off

# Port 21 is the standard FTP port.
Port                            21
MaxInstances                    30

# Set the user and group that the server normally runs at.
User                            ftp
Group                           nogroup

DefaultRoot /var/share

#Logging 
LogFormat                       default "%h %a %l %u %t \"%r\" %s %b"
LogFormat                       auth    "%v [%P] %a  %h %t \"%r\" %s"
LogFormat                       write   "%h %a %l %u %t \"%r\" %s %b %D"

<Global>
        AllowOverwrite                  yes
        IdentLookups                    off

        DisplayLogin                    welcome.msg
        DisplayFirstChdir               .message
        # Logging
        #http://www.proftpd.de/HowTo-Logging.31.0.html
        # file/dir access
        ExtendedLog             /var/log/proftpd/access.log READ write
        ExtendedLog             /var/log/proftpd/upload.log WRITE write
        # Record all logins
        ExtendedLog             /var/log/proftpd/auth.log AUTH auth
        # Paranoia logging level....
        ExtendedLog             /var/log/proftpd/paranoid.log ALL default
</Global>


<Anonymous /var/share>
   User                         ftp
   Group                        nogroup
   UserAlias                    anonymous ftp 
   RequireValidShell            off
   MaxClients                   10
   DisplayLogin                 welcome.msg
   DisplayFirstChdir            .message
   # Limit WRITE everywhere in the anonymous chroot
   <Directory /*>
    <Limit ALL>
        Denyall
    </Limit>
    <Limit WRITE SITE_CHMOD>
       AllowUser OR pub,gnarf
     </Limit>
     <Limit READ LOGIN DIRS>
        AllowAll
     </Limit>
   </Directory>

  # allow everything in upload
   <Directory upload>
        Umask   0202    0007
        <Limit STOR MKD XMKD>
                AllowAll
        </Limit>
   </Directory>
</Anonymous>

I can connect to the server anonymously but when i do an ls it barfs:

Code:

 ftp -n norg 
Connected to Norg (IP).
220 Norgs ftp server
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
530 Please login with USER and PASS
ftp: bind: Address already in use
ftp> user gnarf
331 Password required for gnarf.
Password: 
230 User gnarf logged in.
ftp> ls
200 PORT command successful

As you can see the permissions for the directory should be ok:

Code:

ls -la /var/share
drwsrwsr-x  9 ftp  nogroup 4096 2008-06-02 18:34 .
drwxr-xr-x 15 root root    4096 2008-06-26 10:25 ..
drwxrwxr-x 15 ftp  nogroup 4096 2008-05-18 10:21 subDir

So what is the deal?

I should probably mention that this (or something very close to it) config worked fine before in a different computer up to the moment when it went up in smoke. I don't think it is the problem by itself.
It is more likely something related to permissions or something.

Any help greatly appreciated.

bathory · 07-14-2008, 01:52 AM

Quote:

ftp -n norg
Connected to Norg (IP).
220 Norgs ftp server
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
530 Please login with USER and PASS

Did you try to login as anonymous? After the above you should issue:

Code:

user anonymous

and when prompted for a password give nothing.

Kaste · 07-15-2008, 03:52 AM

Yes i did, Thanks for the reply.

I solved the problem by now. It was actually a problem with the firewall. I changed the firewall config and it has been resolved (even though I`m not certain why i had the problem to begin with)

Thanks anyway.

bathory · 07-15-2008, 11:02 AM

It was something else. A firewall cannot deny access to anonymous ftp and allow access to normal ftp.