Setting Up ProFTPd + TLS On Debian Lenny

[wiseman]

This is a very strange howto it was done sometime ago
and since I have followed it what should I do next


PLEASE REMEMBER also that you say

cp /etc/proftpd/tls.conf /etc/proftpd/tls.conf_orig
cat /dev/null > /etc/proftpd/tls.conf
vi /etc/proftpd/tls.conf

how can you vi a conf file that is not there?

this is FOLLOWED by the conf.tls file

ok Falk maybe its my mistake but here is what I get

status: Connection established, waiting for welcome message...
Response: 220 FTP Server ready.
Command: AUTH TLS
Response: 500 AUTH not understood
Command: AUTH SSL
Response: 500 AUTH not understood

maybe aptitude remove --purge ftpd openssl
and then
aptitude install ftpd opennssl
and then follow
How To Configure PureFTPd To Accept TLS Sessions On Debian Lenny?



thankyou
wiseman

[falko]

Originally Posted by wiseman

vi /etc/proftpd/tls.conf

how can you vi a conf file that is not there?

vi creates the file if it doesn't exist.

[wiseman]

thankyou woks fine now
but
how is possible who is this??????
I have a strict tls connextion


tcp 0 0 wiseman.mydomain.at:ftp 91.137.22.29:47600 ESTABLISHED?

[falko]

Originally Posted by wiseman

I have a strict tls connextion

Yes, but it still uses the FTP port. :ftp just means :21 (port 21); it is shown as :ftp because in /etc/services ftp is mapped to port 21.

[wiseman]

my question is

tcp 0 0 selfless.mydomain.at:ftp 91.137.22.29:47976 ESTABLISHED

I do not know who 91.137.22.29 is?/

also how can i configure ftp so that it allows only connections from
my ip address?



wiseman

[falko]

Originally Posted by wiseman

I do not know who 91.137.22.29 is?/

Have you checked if this is your own IP? http://whatismyipaddress.com/

[wiseman]

I do not understand of course it is NOT my
my ip starts 81. and so on

how someone can access my box on ftp is very worring


wisseman

[falko]

Do you allow anonymous FTP sessions?

[wiseman]

I do not know all I did was to follow the howto
what else can be done to stop this?

wiseman

[falko]

Can you post your proftpd.conf?

If you want to stop break-in attempts, please install fail2ban.