HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   LOTS of FTP timeouts (centos 4.4, perfect install, ispconfig) (http://www.howtoforge.com/forums/showthread.php?t=8935)

ThE-LyNX 8th December 2006 23:39

LOTS of FTP timeouts (centos 4.4, perfect install, ispconfig)
 
Code:

Dec  8 21:14:47 THISserver proftpd[24414]: THISserver (::ffff:82.28.235.36[::ffff:82.28.235.36]) - error setting IPV6_V6ONLY: Protocol not available
Any ideas if this erros from /var/lag/secure has anything to do with it, as it appears hundreds of times

falko 9th December 2006 15:58

What's in /etc/proftpd.conf?

ThE-LyNX 10th December 2006 20:54

Here it is

Code:

# This is the ProFTPD configuration file
# $Id: proftpd.conf,v 1.1 2004/02/26 17:54:30 thias Exp $

ServerName                      "ProFTPD server"
ServerIdent                    on "FTP Server ready."
ServerAdmin                    root@localhost
ServerType                      standalone
#ServerType                    inetd
DefaultServer                  on
AccessGrantMsg                  "User %u logged in."
#DisplayConnect                /etc/ftpissue
#DisplayLogin                  /etc/ftpmotd
#DisplayGoAway                  /etc/ftpgoaway
DeferWelcome                    off

# Use this to excude users from the chroot
DefaultRoot                    ~ !adm

# Use pam to authenticate (default) and be authoritative
AuthPAMConfig                  proftpd
AuthOrder                      mod_auth_pam.c* mod_auth_unix.c

# Do not perform ident nor DNS lookups (hangs when the port is filtered)
IdentLookups                    off
UseReverseDNS                  off

# Port 21 is the standard FTP port.
Port                            21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                          022

# Default to show dot files in directory listings
ListOptions                    "-a"

# See Configuration.html for these (here are the default values)
#MultilineRFC2228              off
#RootLogin                      off
#LoginPasswordPrompt            on
#MaxLoginAttempts              3
#MaxClientsPerHost              none
#AllowForeignAddress            off    # For FXP

# Allow to resume not only the downloads but the uploads too
AllowRetrieveRestart            on
AllowStoreRestart              on

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    20

# Set the user and group that the server normally runs at.
User                            nobody
Group                          nobody

# Disable sendfile by default since it breaks displaying the download speeds in
# ftptop and ftpwho
UseSendfile                    no

# This is where we want to put the pid file
ScoreboardFile                  /var/run/proftpd.score

# Normally, we want users to do a few things.
<Global>
  AllowOverwrite                yes
  <Limit ALL SITE_CHMOD>
    AllowAll
  </Limit>
</Global>

# Define the log formats
LogFormat                      default "%h %l %u %t \"%r\" %s %b"
LogFormat                      auth    "%v [%P] %h %t \"%r\" %s"

# TLS
# Explained at http://www.castaglia.org/proftpd/modules/mod_tls.html
#TLSEngine                      on
#TLSRequired                    on
#TLSRSACertificateFile          /etc/pki/tls/certs/proftpd.pem
#TLSRSACertificateKeyFile      /etc/pki/tls/certs/proftpd.pem
#TLSCipherSuite                ALL:!ADH:!DES
#TLSOptions                    NoCertRequest
#TLSVerifyClient                off
##TLSRenegotiate                ctrl 3600 data 512000 required off timeout 300
#TLSLog                        /var/log/proftpd/tls.log

# SQL authentication Dynamic Shared Object (DSO) loading
# See README.DSO and howto/DSO.html for more details.
#<IfModule mod_dso.c>
#  LoadModule mod_sql.c
#  LoadModule mod_sql_mysql.c
#  LoadModule mod_sql_postgres.c
#</IfModule>

# A basic anonymous configuration, with an upload directory.
#<Anonymous ~ftp>
#  User                        ftp
#  Group                                ftp
#  AccessGrantMsg              "Anonymous login ok, restrictions apply."
#
#  # We want clients to be able to login with "anonymous" as well as "ftp"
#  UserAlias                    anonymous ftp
#
#  # Limit the maximum number of anonymous logins
#  MaxClients                  10 "Sorry, max %m users -- try again later"
#
#  # Put the user into /pub right after login
#  #DefaultChdir                        /pub
#
#  # We want 'welcome.msg' displayed at login, '.message' displayed in
#  # each newly chdired directory and tell users to read README* files.
#  DisplayLogin                /welcome.msg
#  DisplayFirstChdir            .message
#  DisplayReadme                        README*
#
#  # Some more cosmetic and not vital stuff
#  DirFakeUser                  on ftp
#  DirFakeGroup                on ftp
#
#  # Limit WRITE everywhere in the anonymous chroot
#  <Limit WRITE SITE_CHMOD>
#    DenyAll
#  </Limit>
#
#  # An upload directory that allows storing files but not retrieving
#  # or creating directories.
#  <Directory uploads/*>
#    AllowOverwrite            no
#    <Limit READ>
#      DenyAll
#    </Limit>
#
#    <Limit STOR>
#      AllowAll
#    </Limit>
#  </Directory>
#
#  # Don't write anonymous accesses to the system wtmp file (good idea!)
#  WtmpLog                      off
#
#  # Logging for the anonymous transfers
#  ExtendedLog          /var/log/proftpd/access.log WRITE,READ default
#  ExtendedLog          /var/log/proftpd/auth.log AUTH auth
#
#</Anonymous>


DefaultRoot ~


falko 11th December 2006 15:43

Try to put
Code:

UseIPv6 off
into /etc/proftpd.conf and restart Proftpd.

ThE-LyNX 11th December 2006 18:25

Code:

Shutting down proftpd:                                    [  OK  ]
Starting proftpd:  - Fatal: unknown configuration directive 'UseIPv6' on line 155 of '/etc/proftpd.conf'
                                                          [FAILED]

when i try to restart proftpd

edge 11th December 2006 19:35

Are you behind a firewall?
If so, see if you still get the timeout error's when it's disabled (as test)

ThE-LyNX 11th December 2006 19:37

Only firewall i'm behind is the bastile setup from the Bastille/Centos HowTo

And was having problems b4 i installed that

falko 12th December 2006 15:33

What's in /etc/hosts?

ThE-LyNX 12th December 2006 16:03

/etc/hosts
Code:

# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1              server50065.uk2net.com server50065 localhost.localdomain localhost server1 server1.lanarus.co.uk
83.170.97.66            server1.lanarus.co.uk server1


falko 13th December 2006 14:59

Looks ok.

Quote:

Originally Posted by ThE-LyNX
Code:

Dec  8 21:14:47 THISserver proftpd[24414]: THISserver (::ffff:82.28.235.36[::ffff:82.28.235.36]) - error setting IPV6_V6ONLY: Protocol not available
Any ideas if this erros from /var/lag/secure has anything to do with it, as it appears hundreds of times

Is this maybe a client that tries to connect to Proftpd using IPv6? :confused:


All times are GMT +2. The time now is 08:07.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.