FTPS error

[falko]

What happens when you comment out

Include /etc/proftpd_ispconfig.conf

and restart ProFTPd?

Have you compared the proftpd.conf of the working and the not-working ProFTPd?

[SupuS]

If I comment suggested line everything work as expected! And login to FTP is very fast now .. before I had to wait about 10 s.
What included file do? Is it safe keeping it out?

Thanks for solution

[falko]

If you don't need anonymous FTP, you don't need that line.

[SupuS]

Thanks falco .. I don't use anonymous FTP so I comment out this line on other servers Thanks for your help

SupuS

[jupiter2005ster]

okey I didn't find mod_tls.c, but

# if not --> compile proftp with tls :
Quote:
./configure --with-modules=mod_tls
make
make install

when I do it, I didn't find configure. I know ./ syntax this is running, but the file (configure) not exist.

[falko]

Make sure you're in the correct directory.

[jupiter2005ster]

When I tryd to make ./configure....etc. then I was -> /usr/sbin

[falko]

You must be in the ProFTPd source directory.

[Allmight]

Hi!

I have followed this thread since i had the same problems as OP. When commented out the "Include /etc/proftpd_ispconfig.conf" line, i took one step in the right direction, but stumbled upon another one instead.

When i connect, everything works fine until i reach the "LIST" command, where it hangs for awhile, and finally dissconnects with an error.

Status:	Resolving IP-Address for ***.**************.com
Status:	Connecting to ###.###.##.###:21...
Status:	Connection established, waiting for welcome message...
Response:	220 FTP Server ready.
Command:	AUTH TLS
Response:	234 AUTH TLS successful
Status:	Initializing TLS...
Command:	USER *************
Status:	Verifying certificate...
Status:	TLS/SSL connection established.
Response:	331 Password required for *************.
Command:	PASS *******
Response:	230 User ****_******** logged in.
Command:	PBSZ 0
Response:	200 PBSZ 0 successful
Command:	PROT P
Response:	200 Protection set to Private
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is current directory.
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (###,###,##,###,199,172).
Command:	LIST
Error:	Connection timed out
Error:	Failed to retrieve directory listing

Note, i have edited out the domain, IP and user name for privacy's sake.

And here is the tls.log

Apr 03 17:00:01 mod_tls/2.1.1[24974]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:30:01 mod_tls/2.1.1[25371]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:33:37 mod_tls/2.1.1[25440]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:33:37 mod_tls/2.1.1[25440]: TLS/TLS-C requested, starting TLS handshake
Apr 03 17:33:38 mod_tls/2.1.1[25440]: TLSv1/SSLv3 connection accepted, using cipher DHE-RSA-AES128-SHA (128 bits)
Apr 03 17:33:44 mod_tls/2.1.1[25440]: Protection set to Private
Apr 03 17:34:27 mod_tls/2.1.1[25451]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:34:27 mod_tls/2.1.1[25451]: TLS/TLS-C requested, starting TLS handshake
Apr 03 17:34:27 mod_tls/2.1.1[25451]: TLSv1/SSLv3 connection accepted, using cipher DHE-RSA-AES128-SHA (128 bits)
Apr 03 17:34:27 mod_tls/2.1.1[25451]: Protection set to Private
Apr 03 17:35:15 mod_tls/2.1.1[25462]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:35:15 mod_tls/2.1.1[25462]: TLS/TLS-C requested, starting TLS handshake
Apr 03 17:35:15 mod_tls/2.1.1[25462]: TLSv1/SSLv3 connection accepted, using cipher DHE-RSA-AES128-SHA (128 bits)
Apr 03 17:35:15 mod_tls/2.1.1[25462]: Protection set to Private
Apr 03 17:35:49 mod_tls/2.1.1[25469]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:35:49 mod_tls/2.1.1[25469]: TLS/TLS-C requested, starting TLS handshake
Apr 03 17:35:49 mod_tls/2.1.1[25469]: TLSv1/SSLv3 connection accepted, using cipher DHE-RSA-AES128-SHA (128 bits)
Apr 03 17:35:49 mod_tls/2.1.1[25469]: Protection set to Private
Apr 03 17:46:26 mod_tls/2.1.1[25762]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Apr 03 17:46:26 mod_tls/2.1.1[25762]: TLS/TLS-C requested, starting TLS handshake
Apr 03 17:46:26 mod_tls/2.1.1[25762]: TLSv1/SSLv3 connection accepted, using cipher DHE-RSA-AES128-SHA (128 bits)
Apr 03 17:46:26 mod_tls/2.1.1[25762]: Protection set to Private

Does anyone know what might cause this problem?

Can this be because of firewalls, and if so, what ports other than 21 is needed to be open? I have tried to force active mode in CuteFTP and FileZilla, but it allways uses passive anyhow.

The server is firewalled using the built in one in ISPConfig, and on my end i use a Netgear router.

[falko]

Have you tried both active and passive transfers in your FTP client?