[SOLVED] vsftpd denies upload from one IP range

morfanaion · 12-07-2010, 08:52 AM

I've been trying to set up an FTP server for a client, which is something I haven't done before. Things seemed pretty straight forward at first, had everything working, but now I have just one last minor problem.

I'm using vsftpd as my FTP daemon. I managed to configure it to allow only user to log in, I have write enabled, etc. Now, this server is in the 172.16.10.* range. I have servers in two other ranges that need to connect to it and down-/upload files. These ranges are 192.168.15.* and 192.168.16.*. The ones in 192.168.15.* are physically in the same location as my FTP server. The ones on 192.168.16.* connect through a VPN, using a Netscreen 5GT firewall.

Up to this, no problem yet. The problem is this:

I tried the following from the 192.168.15.* range:
- connect: no problem
- login: no problem
- list directory: no problem
- download file: no problem
- upload file: no problem

Now I tried all of this from the 192.168.16.* range as well. Everything checked out except for one tiny crucial thing. I'm not allowed to upload files, I get "550 Requested action not permitted". I login under the same user I've verified I get the correct directory listing, so absolutely everything checks out to be the exact same. Anyone has any idea why this problem is occuring and what I can do to solve this?

unSpawn · 12-07-2010, 05:38 PM

What does the vsftpd log say about this? What's your complete vsftpd config (please exclude comments with 'grep -v ^#|grep .' and post in BB cod tags).

morfanaion · 12-08-2010, 02:48 AM

The only logs concerning this that I could find go to my syslog and they are just saying:

Code:

Dec  8 09:47:03 www1 vsftpd: Wed Dec  8 09:47:03 2010 [pid 29548] [webinfoai] OK LOGIN: Client "192.168.16.11"

Dec  8 09:49:34 www1 vsftpd: Wed Dec  8 09:49:34 2010 [pid 29575] [webinfoai] OK LOGIN: Client "192.168.15.85"
Dec  8 09:49:57 www1 vsftpd: Wed Dec  8 09:49:57 2010 [pid 29577] [webinfoai] OK UPLOAD: Client "192.168.15.85", "/home/webinfoai/nederland_preview_transparent.gif", 11743 bytes, 1169.11Kbyte/sec

I get no messages at all of a failed upload whatsoever or any other message regarding the session from 192.168.16.11

morfanaion · 12-08-2010, 04:46 AM

I've located the source of my problem, what seemed like a permission problem was in fact a matter of FW policies. It turns out the FW at both ends were set to accept only FTP-Get for this connection. I've set it to accept FTP in general and now it works. Still rather confusing to give that particular message, but, what the heck, it's done now. Always nice to inherit a project from someone :S