Problem to access pure-ftpd.

[kidd]

I'm using ubuntu 9.10 and have followed this guide when I was installing: http://www.howtoforge.com/perfect-se...10-ispconfig-3

When I try to connect to one of the accont I've made I get this error:

Status:	Resolving address of kidd.domain.se
Status:	Connecting to 62.13.x.124:21...
Status:	Connection attempt failed with "ECONNREFUSED - Connection refused by server".
Error:	Could not connect to server
Status:	Waiting to retry...

I don't know where to find all logs, but I have one. (not sure exactly what/where its from, but the system told me that I have a new mail, "You have mail in /var/mail/root"

This i what was in that file:

From root@myhost.se  Thu Dec  3 06:25:47 2009
Return-Path: <root@myhost.se>
X-Original-To: root@myhost.se
Delivered-To: root@myhost.se
Received: from localhost (localhost.localdomain [127.0.0.1])
        by myhost.se (Postfix) with ESMTP id 013C3FB7B
        for <root@d-g.se>; Thu,  3 Dec 2009 06:25:47 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at myhost.se
Received: from d-g.se ([127.0.0.1])
        by localhost (myhost.se [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
        id RJxwcajblg+u for <root@myhost.se>;
        Thu,  3 Dec 2009 06:25:44 +0100 (CET)
Received: by myhost.se (Postfix, from userid 0)
        id AD254FB71; Thu,  3 Dec 2009 06:25:44 +0100 (CET)
Subject: [rkhunter] myhost.se - Daily report
To: root@myhost.se
Message-Id: <20091203052544.AD254FB71@myhost.se>
Date: Thu,  3 Dec 2009 06:25:44 +0100 (CET)
From: root@myhost.se (root)

Warning: The file properties have changed:
         File: /usr/bin/awk
         Current inode: 52041    Stored inode: 2380
         Current file modification time: 1259789840
         Stored file modification time : 1259766866
Warning: The file '/usr/bin/gawk' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/sbin/inetd' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The SSH and rkhunter configuration options should be the same:
         SSH configuration option 'PermitRootLogin': yes
         Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
Warning: Hidden directory found: /dev/.udev
Warning: Hidden directory found: /dev/.initramfs
Warning: Application 'gpg', version '1.4.9', is out of date, and possibly a security risk.
Warning: Application 'openssl', version '0.9.8g', is out of date, and possibly a security risk.
Warning: Application 'php', version '5.2.10', is out of date, and possibly a security risk.
Warning: Application 'sshd', version '5.1p1', is out of date, and possibly a security risk.

One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)

The file /var/log/rkhunter.log contains very much, (but almost only the error above) do you want me to post that?

Where do I find more logs? (for the ftp)
I get the same result from the FTP even if i try with a username and pass that I know is wrong.

[till]

Please post the pure-ftpd error messages from /var/log/syslog

[kidd]

The only thing I could find i that log regarding pure-ftpd was.

Dec  3 10:45:01 myhost pure-ftpd: (?@localhost.localdomain) [INFO] New connection from localhost.localdomain
Dec  3 10:45:01 myhost pure-ftpd: (?@localhost.localdomain) [INFO] Logout.

I found that many times.

[Mark_NL]

log files are in /var/log/

that rkhunter mail is probably because you haven't updated it's database yet .. run:

rkhunter -propupd

[kidd]

Originally Posted by Mark_NL

log files are in /var/log/

that rkhunter mail is probably because you haven't updated it's database yet .. run:

rkhunter -propupd

I got this:

root@myhost:~# rkhunter -propupd
Invalid option specified: -propupd

[Mark_NL]

weps, sry it's:

rkhunter --propupd

[kidd]

Originally Posted by Mark_NL

weps, sry it's:

rkhunter --propupd

Now, I got this, is that ok?

root@myhost:~# rkhunter --propupd
[ Rootkit Hunter version 1.3.4 ]
File updated: searched for 152 files, found 126

[Mark_NL]

yep that's good, now you should not get those errors in your mailbox again

[kidd]

Anyone have answer to my first question?

[falko]

What are the outputs of

netstat -tap

and

iptables -L

?