LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices


Reply
  Search this Thread
Old 12-24-2003, 08:03 PM   #1
eidolon
LQ Newbie
 
Registered: Dec 2003
Posts: 8

Rep: Reputation: 0
proftp on rh 7.2 behind crummy router


alrite here goes...i'm having tons of problems and i've read a lot of fm's someone plz help...i've been up for 24 hours and have a headache

1. have a network everywhere router with forwarding issues...likes to forward port 21 to 22 so i've simply gotten proftpd to lissen to port 500 and am going to run my server off of that port...can connect fine on port 500...have tried everything short of throwing the router out the window to fix it...ie different configurations, upgrading to latest firmware, resetting it numerous times, even reading network everywhere's crappy support page...DO NOT BUY THIS ROUTER! but ya using port 500 fixed this

2. am running the newest version of proftpd...i can connect just fine internally but when i connect to port 500 using my service providers ip i get this:

230 User atog logged in.
ftp> ls
500 Illegal PORT command
425 Unable to build data connection: Connection refused
ftp>

i pretty much know it has something to do with passive ports and the router but i have no idea how to fix it...i've already added this on the linux box in /etc/ftpaccess


#passive address directive
passive address 192.168.1.101 192.168.1.0/24
passive address 68.83.47.3 0.0.0.0/0

#passive ports directive
passive ports 192.168.1.0/24 1500 2000

as well as adding a few insmod nat commands...unsure at this point what i added last nite tho...going to make another pot of coffee and wait for your help...i am drained...

merry christmas everyone and thanx in advance for your help

-eidolon
 
Old 12-24-2003, 08:30 PM   #2
Kilka
Member
 
Registered: Sep 2003
Location: Canada
Distribution: Mandrake, Redhat, openBSD, Gentoo
Posts: 84

Rep: Reputation: 15
what ftp is trying to do....

When you connect to the server, it's actually trying to open another port for a data connection. As far as I know, a random port is picked that is not in use. You should disable all port forwarding on your router and use nat/virtual servers instead.

-Kilka
 
Old 12-24-2003, 10:06 PM   #3
eidolon
LQ Newbie
 
Registered: Dec 2003
Posts: 8

Original Poster
Rep: Reputation: 0
is this a setting in the router?
 
Old 12-25-2003, 01:05 PM   #4
Kilka
Member
 
Registered: Sep 2003
Location: Canada
Distribution: Mandrake, Redhat, openBSD, Gentoo
Posts: 84

Rep: Reputation: 15
nat setting you mean...?

There should be some settings for NAT in your router, what kind is it ?

-Kilka
 
Old 12-26-2003, 08:20 AM   #5
eidolon
LQ Newbie
 
Registered: Dec 2003
Posts: 8

Original Poster
Rep: Reputation: 0
it's a linksys network everywhere router
www.networkeverywhere.com
i've been up and down thru these settings at least 500 times and i have nothing to configure nat...other than port forwarding
 
Old 12-27-2003, 03:47 PM   #6
Kilka
Member
 
Registered: Sep 2003
Location: Canada
Distribution: Mandrake, Redhat, openBSD, Gentoo
Posts: 84

Rep: Reputation: 15
proftpd settings...maybe

I'm running proftpd and my config resides in /usr/local/etc by default. Is it running standalone or not ? I'm guessing not since your using /etc/ftpaccess.

I think the problem is you may be trying to connect with a client that has passive on. You should try turning it off on the client.

You can also try forwarding port 20 ( I think) and that may resolve the passive issue.

-Kilka
 
Old 12-27-2003, 06:36 PM   #7
eidolon
LQ Newbie
 
Registered: Dec 2003
Posts: 8

Original Poster
Rep: Reputation: 0
hrmmm...no it is running standalone...i was incorrect in my assumption that ftpaccess had any effect on the server...here is my proftpd.conf file

# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use. It establishes a single server
# and a single anonymous login. It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName "FucktheRIAA.net"
ServerType standalone
DefaultServer on

# Port 21 is the standard FTP port.
Port 500

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances 30

# Set the user and group under which the server will run.
User FTPuser atog
Group FTPgroup

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~

# Normally, we want files to be overwriteable.
<Directory />
AllowOverwrite on
</Directory>

# A basic anonymous configuration, no upload directories. If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous ~ftp>
User ftp
Group ftp

# We want clients to be able to login with "anonymous" as well as "ftp"
UserAlias anonymous ftp

# Limit the maximum number of anonymous logins
MaxClients 10

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayFirstChdir .message

# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>
</Anonymous>

#setting passive ports
PassivePorts 60000 65500
MasqueradeAddress 69.139.64.83


my router is forwarding port 500 to 192.168.1.101 port 500
as well as ports 60000 - 65500

i can connect from outside clients but get errors...

ftp> open 69.139.64.83 500
Connected to 69.139.64.83.
220 ProFTPD 1.2.9 Server (FucktheRIAA.net) [69.139.64.83]
User (69.139.64.83none)): (Blanked out)
331 Password required for (Blanked out).
Password:
230 User (Blanked out) logged in.
ftp> ls
500 Illegal PORT command
425 Unable to build data connection: Connection refused
ftp>

thanx for all your help

-eidolon
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
ProFTP through router patpawlowski Linux - Software 3 03-12-2004 02:42 PM
proftp Joey.Dale Linux - Networking 14 12-15-2003 03:20 PM
ProFtp bnumark Linux - Software 5 06-28-2003 03:36 PM
proftp spate Linux - Software 2 01-09-2003 03:17 PM
ProFTP KillerCheeto Linux - Newbie 6 11-10-2002 03:11 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat

All times are GMT -5. The time now is 07:19 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration