Problem with upgrade

[Captain]

Big thnks for Help Falko!
Output is:

#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#

# Includes DSO modules
Include /etc/proftpd/modules.conf

# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
UseIPv6                         off
# If set on you can experience a longer connection delay in many cases.
IdentLookups                    off

ServerName                      "FTP server"
ServerType                      standalone
DeferWelcome                    off

MultilineRFC2228                on
DefaultServer                   on
ShowSymlinks                    on

TimeoutNoTransfer               600
TimeoutStalled                  600
TimeoutIdle                     1200

DisplayLogin                    welcome.msg
DisplayChdir                    .message true
ListOptions                     "-l"

DenyFilter                      \*.*/
UseReverseDNS                   off
# Use this to jail all users in their homes

<Global>
DefaultRoot                     ~
IdentLookups                    off
ServerIdent on "FTP Server ready."
</Global>
# Users require a valid shell listed in /etc/shells to login.
# Use this directive to release that constrain.
# RequireValidShell             off

# Port 21 is the standard FTP port.
Port                            21

# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.
PassivePorts                  60000 60050

# If your host was NATted, this option is useful in order to
# allow passive tranfers to work. You have to use your public
# address and opening the passive ports used on your firewall as well.
MasqueradeAddress               132.123.123.123

# This is useful for masquerading address with dynamic IPs:
# refresh any configured MasqueradeAddress directives every 8 hours
<IfModule mod_dynmasq.c>
# DynMasqRefresh 28800
</IfModule>

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    30

# Set the user and group that the server normally runs at.
User                            proftpd
Group                           nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask                           022  022
# Normally, we want files to be overwriteable.
AllowOverwrite                  on

TransferLog /var/log/proftpd/xferlog
SystemLog   /var/log/proftpd/proftpd.log

<IfModule mod_quotatab.c>
QuotaEngine off
</IfModule>

<IfModule mod_ratio.c>
Ratios off
</IfModule>


# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default.
<IfModule mod_delay.c>
DelayEngine on
</IfModule>

<IfModule mod_ctrls.c>
ControlsEngine        off
ControlsMaxClients    2
ControlsLog           /var/log/proftpd/controls.log
ControlsInterval      5
ControlsSocket        /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
AdminControlsEngine off
</IfModule>

############MANUAL
DefaultRoot ~
ServerIdent on "FTP Server ready."
DefaultAddress 192.168.123.116


Include /etc/proftpd_ispconfig.conf

/etc/proftpd_ispconfig.conf

DefaultAddress 127.0.0.1
<VirtualHost 192.168.123.116>
        DefaultRoot             ~
        AllowOverwrite          on
        Umask                   002
</VirtualHost>
<VirtualHost 123.123.123.123>
        DefaultRoot             ~
        AllowOverwrite          on
        Umask                   002
</VirtualHost>

/etc/proftpd_ispconfig.conf~

DefaultAddress 127.0.0.1
<VirtualHost 192.168.123.116>
        DefaultRoot             ~
        AllowOverwrite          on
        Umask                   002
</VirtualHost>

[falko]

Can you comment out the

DefaultAddress 192.168.123.116

line in /etc/proftpd/proftpd.conf and restart ProFTPd?

[Captain]

it didnt help!

[falko]

What happens if you comment out the

Include /etc/proftpd_ispconfig.conf

line in your proftpd.conf and restart ProFTPd?

[Captain]

Output of FileZilla in Active Mode:

Command:	MLSD
Response:	425 Unable to build data connection: Connection refused
Error:	Failed to retrieve directory listing

And in ISPConfig Web-FTP didnt work.

If I restart without this line "Include /etc/proftpd_ispconfig.conf" output after restart is:

root@itex:~# /etc/init.d/proftpd restart
 * Stopping ftp server proftpd                                           [ OK ]
 * Starting ftp server proftpd                                                  itex.intechnologies.lv - 192.168.123.116:21 masquerading as 123.123.123.123
                                                                         [ OK ]

If with this line, output is:

root@itex:~# /etc/init.d/proftpd restart
 * Stopping ftp server proftpd                                           [ OK ]
 * Starting ftp server proftpd                                                   - setting default address to 127.0.0.1
localhost.localdomain - 127.0.0.1:21 masquerading as 123.123.123.123                                                                         [ OK ]

I dont but may be it is after this restartings, but my proftpd didnt works at all.
In log files all looks OK.
Please help.

[falko]

Comment out

MasqueradeAddress               132.123.123.123

Restart ProFTPd and try again.

[Captain]

Now works in active mode only via FileZilla.
But via ISPConfig WebFTP didnt work. When I try to connect I have this error:
"Could not connect to localhost "

[falko]

What's the output of

netstat -tap

now?

[Captain]

Output is:

root@itex:~# netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 *:40421                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:32773                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:32774                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:31337                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:mysql                 *:*                     LISTEN      746/mysqld
tcp        0      0 *:ircd                  *:*                     LISTEN      3990/portsentry
tcp        0      0 *:systat                *:*                     LISTEN      3990/portsentry
tcp        0      0 *:5742                  *:*                     LISTEN      3990/portsentry
tcp        0      0 *:sunrpc                *:*                     LISTEN      3990/portsentry
tcp        0      0 *:finger                *:*                     LISTEN      3990/portsentry
tcp        0      0 *:netstat               *:*                     LISTEN      3990/portsentry
tcp        0      0 *:www                   *:*                     LISTEN      1783/apache2
tcp        0      0 *:webmin                *:*                     LISTEN      4420/perl
tcp        0      0 *:54320                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:cisco-sccp            *:*                     LISTEN      3990/portsentry
tcp        0      0 *:81                    *:*                     LISTEN      1581/ispconfig_http
tcp        0      0 *:27665                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:ingreslock            *:*                     LISTEN      3990/portsentry
tcp        0      0 *:ftp                   *:*                     LISTEN      29916/proftpd: (acc
tcp        0      0 itex.domain:domain *:*                     LISTEN      1923/named
tcp        0      0 localhost.locald:domain *:*                     LISTEN      1923/named
tcp        0      0 *:ssh                   *:*                     LISTEN      754/sshd
tcp        0      0 *:nntp                  *:*                     LISTEN      3990/portsentry
tcp        0      0 *:socks                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:smtp                  *:*                     LISTEN      30153/master
tcp        0      0 localhost.localdoma:953 *:*                     LISTEN      1923/named
tcp        0      0 *:12345                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:12346                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:https                 *:*                     LISTEN      1783/apache2
tcp        0      0 *:635                   *:*                     LISTEN      3990/portsentry
tcp        0      0 *:49724                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:uucp                  *:*                     LISTEN      3990/portsentry
tcp        0      0 localhost.localdo:60000 *:*                     LISTEN      1600/postgrey.pid -
tcp        0      0 *:tcpmux                *:*                     LISTEN      3990/portsentry
tcp        0      0 *:20034                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:32771                 *:*                     LISTEN      3990/portsentry
tcp        0      0 *:32772                 *:*                     LISTEN      3990/portsentry

[falko]

Hm, looks ok. Is this a physical server or a virtual machine?