FTP-Server problem

[oldnick]

Hi,

I have configured IPConfig 2.2.29 to opensuse 11.1 with this tutorial and i got problem in ftp-server. FTP-server work fine but IPConfig says that FTP-Server are offline and Web-FTP won't work and error "Could not connect to localhost" occured.

Thanks.

[Ben]

Don't know that tutorial, but I guess you are usign proftp then?

Does proftp exist in the processlist (ps -aux)?
What happens if you manually try to start your ftp-daemon? (in case you are using vsftpd and not proftp, use /etc/init.d/ispconfig_tcpserver as script)
Any logs of the according ftp server after trying to start it?
What does netstat -tap show?

[oldnick]

Yes, proftp

ghetto:~ # ps -ef|grep proftp
nobody    9934     1  0 Jan08 ?        00:00:00 proftpd: (accepting connections)

ghetto:~ # netstat -tap | grep proftp
tcp        0      0 *:ftp                   *:*                     LISTEN     9934/proftpd: (acce

FTP service looks like it works fine, acctually i made one Site user and logged in with it, from another network.

ISPConfig just say that ftp server is offline

[till]

Please post the content of the /etc/hosts file

[oldnick]

Originally Posted by till

Please post the content of the /etc/hosts file

127.0.0.1       localhost

# special IPv6 addresses
::1             localhost ipv6-localhost ipv6-loopback

fe00::0         ipv6-localnet

ff00::0         ipv6-mcastprefix
ff02::1         ipv6-allnodes
ff02::2         ipv6-allrouters
ff02::3         ipv6-allhosts
127.0.0.2       ghetto.fleikki.com ghetto
79.141.144.5    ghetto.fleikki.com ghetto

[falko]

What's the output of

iptables -L

?
Did you switch off AppArmor?

[oldnick]

Originally Posted by falko

What's the output of

iptables -L

?
Did you switch off AppArmor?

ghetto:~ # iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
DROP       tcp  --  anywhere             loopback/8
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTAB                                                     LISHED
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  BASE-ADDRESS.MCAST.NET/4  anywhere
PUB_IN     all  --  anywhere             anywhere
PUB_IN     all  --  anywhere             anywhere
PUB_IN     all  --  anywhere             anywhere
PUB_IN     all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTAB                                                     LISHED
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
PUB_OUT    all  --  anywhere             anywhere
PUB_OUT    all  --  anywhere             anywhere
PUB_OUT    all  --  anywhere             anywhere
PUB_OUT    all  --  anywhere             anywhere

Chain INT_IN (0 references)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain INT_OUT (0 references)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain PAROLE (10 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain PUB_IN (4 references)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere            icmp destination-un                                                     reachable
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:ftp
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:ssh
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:smtp
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:domain
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:http
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:81
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:pop3
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:imap
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:https
PAROLE     tcp  --  anywhere             anywhere            tcp dpt:ndmp
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
DROP       icmp --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain PUB_OUT (4 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

[falko]

Looks ok. Did you switch off AppArmor?

What are the outputs of

telnet localhost 21

and

telnet 127.0.0.1 21

?

What's in your proftpd.conf?

[oldnick]

AppArmor have never been on, checked this anyway

ghetto:~ # telnet localhost 21
Trying ::1...
telnet: connect to address ::1: Connection refused
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 FTP Server ready.

ghetto:~ # telnet 127.0.0.1 21
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 FTP Server ready.

/etc/proftpd.conf

ServerName                      "ProFTPD Default Installation"
ServerType                      standalone
DefaultServer                   on

# Port 21 is the standard FTP port.
Port                            21

# Don't use IPv6 support by default.
UseIPv6                         off

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                           022

MaxInstances                    30

# Set the user and group under which the server will run.
User                            nobody
Group                           nogroup

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~
IdentLookups off
ServerIdent on "FTP Server ready."

# Normally, we want files to be overwriteable.
AllowOverwrite          on

# Bar use of SITE CHMOD by default
#<Limit SITE_CHMOD>
#  DenyAll
#</Limit>

<Anonymous ~ftp>
  User                          ftp
  Group                         ftp

  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias                     anonymous ftp

  # Limit the maximum number of anonymous logins
  MaxClients                    10

  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin                  welcome.msg
  DisplayChdir                  .message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
</Anonymous>


Include /etc/proftpd_ispconfig.conf

/etc/proftpd_ispconfig.conf

DefaultAddress 127.0.0.1
<VirtualHost 127.0.0.2>
        DefaultRoot             ~
        AllowOverwrite          on
        Umask                   002
</VirtualHost>
<VirtualHost 79.141.144.5>
        DefaultRoot             ~
        AllowOverwrite          on
        Umask                   002
</VirtualHost>

[falko]

What happens if you comment out the line

Include /etc/proftpd_ispconfig.conf

in your proftpd.conf and restart ProFTPd?