I have pure-ftp server.
I have checked some ftp failure login attempt made but when i check log file but only see real ip address which is external ip address but i want to trace main ip so anyone tell me howto trace that ip address.
Just wondering if there was a way to trace if an email has been blocked by a webhosts server.
My customer gets an automated email when he books online for Qantas Australia (Australia's biggest Airline Company). I have moved them from an Australian based web host to a US based server and host.
Since the host move, these emails no longer go through to the clients email address on the new hosts server.
I got Qantas to send the email through to me which is on a US server also but a different host to that of my client?? But they did not come through to me even.
I got Qantas to send it through to my personal email address (an Australian bigname ISP) which went through fine and I received it.
The auto generated email possibly could be coming through a 3rd party server so I was thinking maybe this server IP has been blocked for whatever reason (if 3rd party it could have been anyone) It is just strange that used to get them OK through the Australian server and still through my persoanl Australian ISP.
So is there a way to check and confirm and secondly if my suspicions are right would there be a process of trying to get the hosts to accept an email from Qantas as this customer doesnt want to have another email account.
I have install WHM and also installed CSF. how to block or denied a user to access ftp.
View 4 Replies View RelatedI am not 100% sure if i am going to be able to describe the problem, but i hope someone will get an idea what i am talking about.
I have pure-ftpd installed on my server.
In one of the folders in my public_html i have more then 10 000 files.
When i ftp to my username using FlashFXP i am unable to list more then 1998 files.
Does it have to do anything with passive ports range or?
what port range should i use, and how should i enter it in /etc/sysconfig/iptables.
i tried everything i know and reinstalled my vps more than 5 times for the last 24hrs but i'm out of luck. Pure-ftpd would not start what ever i do.
Also lxadmin installation gives me the following error:
Downloading Installappdata
pure-ftpd: unrecognized service
unlink: cannot unlink `/usr/bin/lxsuexec': No such file or directory
unlink: cannot unlink `/usr/bin/lxexec': No such file or directory
mv: cannot stat `/sbin/udevd': No such file or directory
rm: cannot remove `/dev/pts/0': Operation not permitted
I've run a pure-ftpd-server privetley and haven't bothered to chroot the enviroment since I only used it myself when I needed files remotley. Now on request of my school and work buddies I've started hosting a website which they are to manage and through my ftp-server add / remove the site's different files.
I know how to start it with chrooted enviroment but everytime I reboot it, which I usually don't need to anyway, it starts unchrooted so I manually have to kill the ftp-daemon and start it with my customised parameters.
Is there a way to change the init.d/pure-ftpd-conf or something to start with my customised options? i.e with the chroot-option turned on.
I am just in the process of finish off setting up my first cPanel server but I am having the follow problems when connecting to FTP:
Response:220---------- Welcome to Pure-FTPd [TLS] ----------
Response:220-You are user number 1 of 50 allowed.
Response:220-Local time is now 17:20. Server port: 21.
Response:220-IPv6 connections are also welcome on this server.
Response:220 You will be disconnected after 15 minutes of inactivity.
Command:USER xxxx
Response:331 User ehuk OK. Password required
Command:PASS ***********
Response:230-User ehuk has group access to: ehuk
Response:230 OK. Current restricted directory is /
Command:SYST
Response:215 UNIX Type: L8
Command:FEAT
Response:211-Extensions supported:
Response: EPRT
Response: IDLE
Response: MDTM
Response: SIZE
Response: REST STREAM
Response: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
Response: MLSD
Response: ESTP
Response: PASV
Response: EPSV
Response: SPSV
Response: ESTA
Response: AUTH TLS
Response: PBSZ
Response: PROT
Response:211 End.
Status:Connected
Status:Retrieving directory listing...
Command:PWD
Response:257 "/" is your current location
Command:TYPE I
Response:200 TYPE is now 8-bit binary
Command:PASV
Response:227 Entering Passive Mode (10,21,103,3,255,61)
Status:Server sent passive reply with unroutable address. Using server address instead.
Command:LIST
Error:Connection timed out
Error:Failed to retrieve directory listing
The server is behind a firewall, I can connect to the FTP via VPN but I cant connect via the remote IP, any ideas?
I know cPanel is designed for NAT but I have worked around this, the FTP is the only issue,
I have too many connection from 202.96.5.29 through pure-ftpd:
PHP Code:
Sep 3 00:27:24 server pure-ftpd: (?@202.96.5.29) [INFO] New connection from 202.96.5.29Sep 3 00:27:25 server pure-ftpd: (?@202.96.5.29) [WARNING] Authentication failed for user [oracle]Sep 3 00:27:29 server pure-ftpd: (?@202.96.5.29) [WARNING] Authentication failed for user [oracle]Sep 3 00:27:31 server pure-ftpd: (?@202.96.5.29) [WARNING] Authentication failed for user [Administrator]Sep 3 00:27:39 server pure-ftpd: (?@202.96.5.29) [WARNING] Authentication failed for user [oracle]Sep 3 00:27:49 server pure-ftpd: (?@202.96.5.29) [WARNING] Authentication failed for user [oracle]Sep 3 00:27:49 server pure-ftpd: (?@202.96.5.29) [ERROR] Too many authentication failuresSep 3 00:27:49 server pure-ftpd: (?@202.96.5.29) [INFO] New connection from 202.96.5.29
I block this ip (202.96.5.29 ) with:
PHP Code:
/sbin/iptables -I INPUT -s 202.96.5.29 -j DROProute add 202.96.5.29 reject
but is not blocked always I have same too many connection?
how can I force block this Ip?
/var/log/messages is full of messages like this every 5 minutes:
[INFO] New connection from 209.85.4.32
pure-ftpd: (?@209.85.4.32) [INFO] Logout
is there any way to stop it?
When I look around almost all offers are webhosting as
Dedicated or Managed servers with PHP, MxySQL and so on.
What I need is (big) pure backup space which must be at least
accessible by (reliable and pretty fast but not absolute ultar-high-speed) ftp server (which supports resuming of ftp-sessions).
Needed space: 200 GB
Traffic per month: 200-500 GB (can be at night)
(only) Nice to have (but not absolutely required):
- TLS/SSL Encryption for ftp
- 2-5 more ftp accounts (sharing the same space)
- crontab and perl scripts
- WebDav
Is there a way to disable the temporary filename, for instance when I upload a file via ftp, the filename becomes .pureftp-24213421423. It returns back to the original filename when you abord the transfer or when it's completed.
View 2 Replies View RelatedI had what I thought was a fairly smooth install via yum of Pure-FTP on a Fedora 7 SELinux server. I configured it to use it's own PureDB virtual user system, and I added a few users using # pure-pw useradd to test things out. However, upon successfully logging in...
[21:51:34] USER test1
[21:51:34] 331 User test1 OK. Password required
[21:51:34] PASS (hidden)
[21:51:34] Cannot login waiting to retry (30s)...
[21:51:34] Server closed connection...so, I check /var/log/messages to find...
Jul 31 21:50:25 homeserve pure-ftpd: (?@192.168.0.134) [INFO] New connection from 192.168.0.134
Jul 31 21:50:25 homeserve pure-ftpd: (?@192.168.0.134) [ERROR] Home directory not available - aborting
Clearly, something is awry. When I created the users, I explicitly specified their home directory using pure-pw's -d flag, and I can confirm that it was entered correctly by viewing the /etc/pure-ftpd/pureftpd.passwd. The directories, of course, do exist with the proper permissions and ownership.
I have a slight problem with one user trying to upload with FTP to the server. The problem is, if he is uploading a file that will take awhile... his FTP connection will be dropped if he visits his site during the transfer.
Me and a few others have tried duplicating the problem with no success. Our uploads do not get stopped. Anyhow, I took a guess that maybe it was a problem with APF our software based firewall. I turned it off for a few minutes, and then the users problems dissappeared.
I turned on full logging in APF, and had the user try yet again. Here is the output:
PHP Code:
Mar 3 17:23:22 boundless kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=69.65.12.230 DST=69.149.62.111 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=21 DPT=61682 WINDOW=0 RES=0x00 RST URGP=0
Mar 3 17:23:32 boundless kernel: ** IN_TCP DROP ** IN=eth0 OUT= MAC=00:e0:81:44:f0:a2:00:d0:03:c2:a8:00:08:00 SRC=69.149.62.111 DST=69.65.12.230 LEN=1492 TOS=0x00 PREC=0x00 TTL=116 ID=64493 DF PROTO=TCP SPT=61684 DPT=23301 WINDOW=65535 RES=0x00 ACK URGP=0
Mar 3 17:23:32 boundless kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=69.65.12.230 DST=69.149.62.111 LEN=40 TOS=0x08 PREC=0x00 TTL=64 ID=65164 DF PROTO=TCP SPT=23301 DPT=61684 WINDOW=32767 RES=0x00 ACK URGP=0
Mar 3 17:23:32 boundless kernel: ** IN_TCP DROP ** IN=eth0 OUT= MAC=00:e0:81:44:f0:a2:00:d0:03:c2:a8:00:08:00 SRC=69.149.62.111 DST=69.65.12.230 LEN=1492 TOS=0x00 PREC=0x00 TTL=116 ID=64496 DF PROTO=TCP SPT=61684 DPT=23301 WINDOW=65535 RES=0x00 ACK PSH URGP=0
Mar 3 17:23:32 boundless kernel: ** IN_TCP DROP ** IN=eth0 OUT= MAC=00:e0:81:44:f0:a2:00:d0:03:c2:a8:00:08:00 SRC=69.149.62.111 DST=69.65.12.230 LEN=1492 TOS=0x00 PREC=0x00 TTL=116 ID=64497 DF PROTO=TCP SPT=61684 DPT=23301 WINDOW=65535 RES=0x00 ACK URGP=0
Mar 3 17:23:32 boundless kernel: ** IN_TCP DROP ** IN=eth0 OUT= MAC=00:e0:81:44:f0:a2:00:d0:03:c2:a8:00:08:00 SRC=69.149.62.111 DST=69.65.12.230 LEN=1492 TOS=0x00 PREC=0x00 TTL=116 ID=64499 DF PROTO=TCP SPT=61684 DPT=23301 WINDOW=65535 RES=0x00 ACK URGP=0
Mar 3 17:23:32 boundless kernel: ** IN_TCP DROP ** IN=eth0 OUT= MAC=00:e0:81:44:f0:a2:00:d0:03:c2:a8:00:08:00 SRC=69.149.62.111 DST=69.65.12.230 LEN=1492 TOS=0x00 PREC=0x00 TTL=116 ID=64500 DF PROTO=TCP SPT=61684 DPT=23301 WINDOW=65535 RES=0x00 ACK PSH URGP=0
Mar 3 17:23:33 boundless kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=69.65.12.230 DST=69.149.62.111 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=21 DPT=61682 WINDOW=0 RES=0x00 RST URGP=0
Mar 3 17:23:34 boundless kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=69.65.12.230 DST=69.149.62.111 LEN=40 TOS=0x08 PREC=0x00 TTL=64 ID=65166 DF PROTO=TCP SPT=23301 DPT=61684 WINDOW=32767 RES=0x00 ACK URGP=0
Mar 3 17:23:39 boundless kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=69.65.12.230 DST=69.149.62.111 LEN=40 TOS=0x08 PREC=0x00 TTL=64 ID=65168 DF PROTO=TCP SPT=23301 DPT=61684 WINDOW=32767 RES=0x00 ACK URGP=0
Mar 3 17:23:44 boundless kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=69.65.12.230 DST=69.149.62.111 LEN=40 TOS=0x08 PREC=0x00 TTL=64 ID=65170 DF PROTO=TCP SPT=23301 DPT=61684 WINDOW=32767 RES=0x00 ACK FIN URGP=0
Mar 3 17:23:44 boundless pure-ftpd: (lf4worl@69.149.62.111) [INFO] Timeout (no new data for 900 seconds)
The 17:23:44listings is the exact time he visited his site during the upload. The weird part is the Timeout message at that same exact time. No new data for 900 seconds...
Anyhow, I don't really want to post the full apf.conf if I don't have to... So can anyone take a guess at what APF rule might be causing the problem?
Also, why would it only be affecting 1 client when all the rest can visit their site while uploading?
I've been running pure-ftpd for around 4 months now without any problems, until around 24-48 hours ago file upload has been going a bit loopy.
When you upload a file the speed bounces considerably, and at times pauses on 0kbps until it then dies and fails the upload. 9/10 uploads I have tried have failed.
[R] Opening data connection IP: 74.86.20.181 PORT: 35283
[R] LIST -al
[R] 150 Accepted data connection
[R] 226-Options: -a -l
[R] 226 6 matches total
[R] List Complete: 374 bytes in 0.64 seconds (0.6 KB/s)
Transfer queue completed
1 File failed to transfer
[R] Connection lost: chacha
We have restarted pure-ftpd a number of times, but have had no luck.
Please could you try and upload a file (at least 10mb and please nothing dodgey) to this FTP account:
address: chacha.99k.org
user: chacha@99k.org
pass: password
And output the result.
Does anyone here have experience with pure-ftpd and would possibly consider giving my system a "once over"?
Timezone on server is set to GMT -5 EDT
My timezone is GMT -5 EDT
Yet filezilla 3.x ftp client connected to my server's pure-ftpd server offsets time on transferred files by an hour, saying now at 8:52 that the file was uploaded to the server at 9:52.
WHM and uptime, etc. at the SSH prompt show server time correct, matching my own time.
But connecting via filezilla 3 I get:
Status: Calculating timezone offset of server...
Command:MDTM .htaccess
Response:213 20080208013750
Status:Timezone offsets: Server: -18000 seconds. Local: -14400 seconds. Difference: 3600 seconds.
Status: Directory listing successful
If I connect locally to pure-ftp via the server shell ftp, I get
Connected to localhost.
220---------- Welcome to Pure-FTPd [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 20:52. Server port: 21.
which matches
$ uptime
20:52:28
The filezilla forums however indicate the problem is due to some "non-standards compliant setup" of my ftp server.
[url]
Quote:
As required in RFC 3659 [url]FileZilla assumed MDTM returns timestamps in UTC. Based on the timestamp return in the LIST reply and the corresponding MDTM reply, it calculates the timezone offset of the server.
Obviously this fails on broken or misconfigured servers.
I can assure you that it works fine on all standards-compliant servers.
Is there something I can tweak with pure-ftpd, or is this a Filezilla 3 bug?
if you can share a 100MB download link that I can use to test cogent's speed to my network. Hopefully plugged into a 100MBPS port at the switch to see if it will max out or not.
View 6 Replies View RelatedToday I tried to setup pure-ftpd server on slackware linux and managed to do that I also enabled virtual users feature, but when I log in to ftp as virtual user I cannot create any dirs or change dirs.
My question is - how do I enable for virtual user: deleting, changing, renaming, creating files, dirs in his home ftp directory?
I don't know whether possible or not if we can trace the dns from certain reseller webhosting and found where she or he bought the package... maybe it is important because we must know the reputation of the seller.
View 2 Replies View RelatedSimultaneous FTP User Question - Cpanel/WHM/Pure-FTP, Dual Xeon 2.4, 1gRAM, Dedicated
Does the following dedicated server spec throw any flags for you when considering our intended future use?
DEDICATED SERVER SPEC
Dual Xeon 2.40 ghz.
1 gig RAM
INTENDED FUTURE USE
- We currently host 300 low volume websites on the server.
- We only use 40 gigs of data bandwidth per month. (1000 allotted)
- We developed a new software product that allows auto-updates 300kb of data each day.
- We expect up to 500 people to use this software and need to access our FTP daily, at different times of the day (random).
- We plan to embed the FTP information into the software.
The FTP access will be transparent to the user.
Does our dedicated server sound like it could handle this? My guess is yes.
I got 3 IP addresses i am trying to trace and I want to know where this person has send me those from. Is is possible to get exact addresses/locations?, where the person who sent me the emails is from? and Infos which websites have been visited?
This are the 3 IP's i have got:
216.139.189.105
41.204.234.10
82.13.210.203
After Trace route whats the next thing to do ? When my ISP dynamic IP address is some like and starts with 112.0.0.0 I cannot see all sites on the server. So what I did run a tracert on DOS prompt. After 9 hops and reach this IP 216.18.239.6 everything timed out and it cannot reach my server.
I already tested several Internet access and its reaching the server except my home DSL with the IP 112. I also checked if the IP is block on the firewall but its not present on the block list. I also mentioned this with my internet provider and still waiting for notification.
what to do next?
How would I trace a malware file uploaded to a particular account? ....
View 2 Replies View RelatedHow do I trace name servers back to the web hosting company?
There is a website that is sharing my copyrighted information and I want to contact their hosting company.
They are using nameservers
NS.theirwebsite.com
N2.theirwebsite.com
Anyone have a tool for this?
I dont know much about server. I was wondering: if I plug in my laptop at work would the server log my connection, even if my laptop is not a client?
View 2 Replies View Relatedanybody here have a review or a way to trace proccess from scratch after top -c or ps -aux
how i got the exact file or user cause this process ....
I found that recently a lot of nobody files appear in my /tmp.
I delete and delete.. by still same. I don't know how to trace where they from. I suspect is from my hosting users, but I don't know how to check and trace. Anybody can give me some guide?
Can anyone please tell me how dangerous in fact Apache's TRACE and TRACK functions?
I have read common explanation but would disabling TRACK and TRACE improve my server's ability to fight cross site scripting and similar attacks and make it more secure?
I can't remember the name of the utility that lets you watch what a process is doing. You call it on a PID and you can see all the memory allocations, file IO, library loading, etc. that the process is doing as it happens. Anyone know what I'm thinking of?
View 2 Replies View RelatedI recently moved a customer's site to a new server. Everything went smoothly except for the fact my customer cannot access the new site. When he pings it he gets the right IP address but it just times out.
The URL is regalfire.co.uk
I asked him to run a tracert command and it seems to find the right path but stops just short of finding the server. The last server he connects to is ge-5-2.the.uk.euroconnex.net [87.127.231.90] which is the same as me. The next step is the actual server but for him it just times out.
I can see the new site fine. His ISP is Virgin Media and I have asked several other customers with the same ISP and they can see the site OK.
He has flushed his DNS cache and the problem remains.
Does anyone have any ideas what I could try next?
How can i trace my datacenter detail through my website ip?
View 14 Replies View RelatedI had a bandwidth spike yesterday for a short while and I wanted to know where I can look to trace what IP(s) caused the high traffic spike.....
View 1 Replies View Related