ProFTPD w/ ISPConfig

[bve32k]

When I log onto my Web FTP in ISPConfig the directory is wrong. It is going to /home/bve32k/ and not /var/www/www.bve32k.org/. I changed the directory in the passwords file that was in etc. Then it showed up right in the Web FTP, but it would not let me upload files or do anything.

In ISPConfig I can log onto the web FTP. But when I use a client I can't get into my FTP. Am I doing something wrong or I didn't open a port on the router?

[falko]

When I log onto my Web FTP in ISPConfig the directory is wrong. It is going to /home/bve32k/ and not /var/www/www.bve32k.org/. I changed the directory in the passwords file that was in etc. Then it showed up right in the Web FTP, but it would not let me upload files or do anything.

Check the permissions of /var/www/www.bve32k.org/. Is it owned by the correct user and group?

[bve32k]

Ok..I got the directory to work now when I go in WebFTP through ISPConfig. I still can't log into it with an FTP program.

Thanks, Ken

[till]

Please post the output of the commands:

netstat -tap

and:

iptables -L

[bve32k]

NetStat:
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 localhost.localdomain:2208 *:* LISTEN 1905/hpiod
tcp 0 0 *:sco-dtmgr *:* LISTEN 1707/rpc.statd
tcp 0 0 *:mysql *:* LISTEN 2046/mysqld
tcp 0 0 *:sunrpc *:* LISTEN 1686/portmap
tcp 0 0 *:hosts2-ns *:* LISTEN 2493/ispconfig_http
tcp 0 0 bve32k.org:domain *:* LISTEN 2794/named
tcp 0 0 localhost.localdomai:domain *:* LISTEN 2794/named
tcp 0 0 localhost.localdomain:ipp *:* LISTEN 1922/cupsd
tcp 0 0 *:smtp *:* LISTEN 16189/master
tcp 0 0 localhost.localdomain:rndc *:* LISTEN 2794/named
tcp 0 0 localhost.localdomain:2207 *:* LISTEN 1910/python
tcp 0 0 bve32k.org:35016 64.86.101.134:http ESTABLISHED 23364/firefox-bin
tcp 0 0 bve32k.org:56157 64.86.101.135:http TIME_WAIT -
tcp 0 0 bve32k.org:56173 64.86.101.135:http ESTABLISHED 23364/firefox-bin
tcp 0 0 bve32k.org:56170 64.86.101.135:http ESTABLISHED 23364/firefox-bin
tcp 1 0 bve32k.org:43277 mirror.colorado.edu:http CLOSE_WAIT 2286/python
tcp 1 0 bve32k.org:46630 fedora.server4you.net:http CLOSE_WAIT 2286/python
tcp 1 0 bve32k.org:43404 fpserv.dulug.duke.edu:http CLOSE_WAIT 2286/python
tcp 1 0 bve32k.org:38545 newmirror.linux.duke.e:http CLOSE_WAIT 2286/python
tcp 1 0 bve32k.org:56549 12.130.81.249:http CLOSE_WAIT 23364/firefox-bin
tcp 0 0 bve32k.org:56548 12.130.81.249:http ESTABLISHED 23364/firefox-bin
tcp 0 0 *:imaps *:* LISTEN 2076/dovecot
tcp 0 0 *:pop3s *:* LISTEN 2076/dovecot
tcp 0 0 *:pop3 *:* LISTEN 2076/dovecot
tcp 0 0 *:imap *:* LISTEN 2076/dovecot
tcp 0 0 *:http *:* LISTEN 2684/httpd
tcp 0 0 *:ftp *:* LISTEN 16132/proftpd: (acc
tcp 0 0 *:ssh *:* LISTEN 1933/sshd
tcp 0 0 bve32k.org:ipp *:* LISTEN 1922/cupsd
tcp 0 0 bve32k.org:rndc *:* LISTEN 2794/named
tcp 0 0 *:https *:* LISTEN 2684/httpd


IPTables:
Chain INPUT (policy DROP)
target prot opt source destination
DROP tcp -- anywhere 127.0.0.0/8
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
DROP all -- BASE-ADDRESS.MCAST.NET/4 anywhere
PUB_IN all -- anywhere anywhere
PUB_IN all -- anywhere anywhere
PUB_IN all -- anywhere anywhere
PUB_IN all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
DROP all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
PUB_OUT all -- anywhere anywhere
PUB_OUT all -- anywhere anywhere
PUB_OUT all -- anywhere anywhere
PUB_OUT all -- anywhere anywhere

Chain INT_IN (0 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere
DROP all -- anywhere anywhere

Chain INT_OUT (0 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere

Chain PAROLE (9 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere

Chain PUB_IN (4 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp echo-request
PAROLE tcp -- anywhere anywhere tcp dpt:ftp
PAROLE tcp -- anywhere anywhere tcp dpt:ssh
PAROLE tcp -- anywhere anywhere tcp dpt:smtp
PAROLE tcp -- anywhere anywhere tcp dpt:domain
PAROLE tcp -- anywhere anywhere tcp dpt:http
PAROLE tcp -- anywhere anywhere tcp dpt:hosts2-ns
PAROLE tcp -- anywhere anywhere tcp dpt:pop3
PAROLE tcp -- anywhere anywhere tcp dpt:https
PAROLE tcp -- anywhere anywhere tcp dpt:ndmp
ACCEPT udp -- anywhere anywhere udp dpt:domain
DROP icmp -- anywhere anywhere
DROP all -- anywhere anywhere

Chain PUB_OUT (4 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere

[till]

FTP is listening on all interfaces and is not blocked by ypur server firewall. the WebFTP is a normal FTP client which connects with FTP commands, this means FTP is working correctly on your server. Please try another FTP client on your workstation and mabe try to shutdown your desktop firewall temporarily (only if you are in a local network with a firewall on your router!).

[bve32k]

I turned off Windows firewall and disabled F-Secure. I tried FireFTP which is a add-on for FireFox. Still won't let me connect to it. Then I tried IE 6 and tried through there..still won't work. It pops up and ask for a username and password but when I type it in...it won't let me connect. I also opened up ports 20 and 21 on the router. Still nothing.

[falko]

Did you try both active and passive transfers in your FTP client?
Which distribution do you use?

[bve32k]

When I turn passive mode off it says 500 Illegal PORT command
. If I leave it on it just doesn't log on at all.

[falko]

Which distribution do you use?

[bve32k]

Oh yea..That was the main reason I posted to tell you that. Fedora 6.

[falko]

Please make sure then that you disabled SELinux.

[bve32k]

The Firewall and SELinux are both disabled..

[falko]

That's good.
Do you find any errors in your logs, e.g. in /var/log/auth.log, /var/log/messages, /var/log/syslog, ...?

[bve32k]

The only one I can find is /var/log/messages. Those other 2 files are not there. The messages file has nothing in it though.

[falko]

What's the output of ls -la /var/log?

[bve32k]

total 2020
drwxr-xr-x 12 root root 4096 Nov 26 23:59 .
drwxr-xr-x 26 root root 4096 Nov 17 18:26 ..
-rw------- 1 root root 176944 Nov 17 13:24 anaconda.log
-rw------- 1 root root 15498 Nov 17 13:24 anaconda.syslog
-rw------- 1 root root 51534 Nov 17 13:24 anaconda.xlog
-rw------- 1 root root 0 Nov 26 04:03 boot.log
-rw------- 1 root root 0 Nov 19 04:02 boot.log.1
-rw------- 1 root root 0 Nov 17 13:25 boot.log.2
-rw------- 1 root utmp 768 Nov 25 10:31 btmp
-rw------- 1 root root 16390 Nov 27 22:30 cron
-rw------- 1 root root 68528 Nov 26 04:02 cron.1
-rw------- 1 root root 9889 Nov 19 04:02 cron.2
drwxr-xr-x 2 lp sys 4096 Nov 26 04:03 cups
-rw-r--r-- 1 root root 11390 Nov 22 15:44 dmesg
drwxr-xr-x 2 root root 4096 Nov 25 11:03 gdm
drwx------ 2 root root 4096 Nov 27 02:03 httpd
-rw-r--r-- 1 root root 9161 Nov 17 19:09 ispconfig_install.log
-rw-r--r-- 1 root root 146584 Nov 22 15:38 lastlog
drwxr-xr-x 2 root root 4096 Nov 17 13:07 mail
-rw------- 1 root root 1957 Nov 27 04:02 maillog
-rw------- 1 root root 1960 Nov 26 04:02 maillog.1
-rw------- 1 root root 1961 Nov 19 04:02 maillog.2
-rw------- 1 root root 25422 Nov 27 22:30 messages
-rw------- 1 root root 195862 Nov 26 04:03 messages~
-rw------- 1 root root 0 Nov 25 10:38 messages.1
-rw------- 1 root root 198534 Nov 19 04:02 messages.2
-rw-r----- 1 mysql mysql 4504 Nov 22 15:45 mysqld.log
drwx------ 2 root root 4096 Jul 24 14:54 ppp
drwxr-xr-x 2 root root 4096 Nov 17 15:26 prelink
drwxr-x--- 2 root root 4096 Aug 28 09:50 proftpd
-rw-r--r-- 1 root root 31286 Nov 27 04:02 rpmpkgs
-rw-r--r-- 1 root root 31271 Nov 25 04:02 rpmpkgs.1
-rw-r--r-- 1 root root 31172 Nov 18 15:39 rpmpkgs.2
drwx------ 2 root root 4096 Sep 1 22:59 samba
-rw-r--r-- 1 root root 121734 Nov 17 13:59 scrollkeeper.log
-rw------- 1 root root 17806 Nov 27 04:02 secure
-rw------- 1 root root 153068 Nov 26 04:03 secure.1
-rw------- 1 root root 208564 Nov 19 04:02 secure.2
-rw------- 1 root root 0 Nov 26 04:03 spooler
-rw------- 1 root root 0 Nov 19 04:02 spooler.1
-rw------- 1 root root 0 Nov 17 13:07 spooler.2
drwxr-x--- 2 squid squid 4096 Nov 7 11:34 squid
drwxr-xr-x 2 root root 4096 Jul 19 11:25 vbox
-rw-rw-r-- 1 root utmp 254592 Nov 27 22:30 wtmp
-rw-r--r-- 1 root root 0 Nov 26 23:59 xferlog
-rw-r--r-- 1 root root 20 Nov 26 04:03 xferlog.1.gz
-rw-r--r-- 1 root root 20 Nov 19 04:02 xferlog.2.gz
-rw-r--r-- 1 root root 0 Nov 26 23:59 xferlog.ispconfigsave
-rw-r--r-- 1 root root 57147 Nov 25 11:03 Xorg.0.log
-rw-r--r-- 1 root root 57565 Nov 25 11:02 Xorg.0.log.old
-rw-r--r-- 1 root root 11269 Nov 25 10:36 yum.log

[till]

Please have a look at the xferlog file. It contains the proftpd log entries on your system.

[falko]

Also check /var/log/secure.

[bve32k]

xferlog has nothing in it. Secure has a lot in it!

http://www.bve32k.org/secure

[AceRimmer]

I've just installed Ubuntu 6.10 server and am having the same problem, can login on the server, but cant access it from another PC on the network.

Get a login box through IE but nothing works.

[till]

I've just installed Ubuntu 6.10 server and am having the same problem, can login on the server, but cant access it from another PC on the network.

Get a login box through IE but nothing works.

You can not access the server with which protocol? SSH, FTP, SMTP, POP3, IMAP, HTTP, HTTPS?

[AceRimmer]

My bad, im a newb so screwed up.

I was being impatient, two problems:

1. I hadn't created an admin account for the site.

2. I was having the XP login delay issue where nothing happened for about 15 secs then it would login, by opening port 113 on my workstation I can login and browse the FTP really quick now.

[falko]

xferlog has nothing in it. Secure has a lot in it!

http://www.bve32k.org/secure
Are you sure the username is Administrator?

[bve32k]

I don't know how administrator got there. The username is web1_admin and thats what I was using to login to the ftp.

[falko]

Have you double-checked in your FTP client settings that you use web1_admin in the correct field?

[bve32k]

Yup..I had to re-set up the FTP on the client machine because my Windows machine died. Now i'm on the Mac. So the username is web1_admin.

[falko]

And does the server still log Administrator?