How to setup FTP over SSL/TLS in Pure-FTPd

Discussion in 'Installation/Configuration' started by Ventzy, Sep 30, 2010.

  1. Ventzy

    Ventzy New Member

    I want all ftp connections to my server to be encrypted.

    I found this http://www.howtoforge.com/forums/showpost.php?p=219581&postcount=3

    But it gives me in FileZilla (on Vista):
    Status: Connecting to IP:990...
    Status: Connection attempt failed with "ECONNREFUSED - Connection refused by server".
    Plain FTP connection to the server is OK.

    I read http://download.pureftpd.org/pub/pure-ftpd/doc/README.TLS and it says that pure-ftpd daemon must be started with "--tls=2", but I am not sure how to setup that.

    I am using Ubuntu 10.04 and ISPConfig 3.0.2.2

    Thanks.
     
    Last edited: Sep 30, 2010
  2. falko

    falko Super Moderator ISPConfig Developer

    Maybe you can set this in the PureFTPd init script in /etc/init.d/.
     
  3. DUCKFACE

    DUCKFACE New Member

    simmilar problem ...

    hello :)
    i have simmilar problem
    im tryin to run pureftpd wiht TLS

    on echo 1 error is
    Response: 257 "/" is your current location
    Command: TYPE I
    Response: 200 TYPE is now 8-bit binary
    Command: PASV
    Response: 227 Entering Passive Mode (10,8,0,1,154,133)
    Command: MLSD
    Error: Connection timed out
    Error: Failed to retrieve directory listing

    debug info - Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [INFO] New connection from aaa.bbb.ccc.ddd
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [DEBUG] Command [user] [USER_1]
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [DEBUG] Command [pass] [<*>]
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [INFO] USER_1 is now logged in
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [opts] [UTF8 ON]
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [pwd] []
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [type]
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [pasv] []
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [mlsd] []
    Oct 5 11:36:28 server pure-ftpd: ([email protected]) [INFO] Logout.


    on echo 2 error is
    Command: PASS *******************
    Response: 530 Login authentication failed
    Error: Critical error
    Error: Could not connect to server

    debug info - [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.


    on echo 3 error is
    Response: 421 Sorry, cleartext sessions are not accepted on this server.
    Error: Could not connect to server

    debug info - [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.

    for 2 and 3 TLS the error is expected ...

    ftp client is FileZilla for windows ..
    where i get wrong ?
     
    Last edited: Oct 5, 2010
  4. falko

    falko Super Moderator ISPConfig Developer

  5. DUCKFACE

    DUCKFACE New Member

    I am using Ubuntu 10.04 and ISPConfig 3.0.2.2

    I am using Ubuntu 10.04 and ISPConfig 3.0.2.2

    I have done the settings and ftp server is running with TLS but when i try to login i have this :
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [INFO] New connection from aaa.bbb.ccc.ddd
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [DEBUG] Command [user] [USER_1]
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [DEBUG] Command [pass] [<*>]
    Oct 5 11:36:07 server pure-ftpd: (?@aaa.bbb.ccc.ddd) [INFO] USER_1 is now logged in
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [opts] [UTF8 ON]
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [pwd] []
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [type]
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [pasv] []
    Oct 5 11:36:07 server pure-ftpd: ([email protected]) [DEBUG] Command [mlsd] []
    Oct 5 11:36:28 server pure-ftpd: ([email protected]) [INFO] Logout.

    means auth is ok ... ssl is ok ... but somethin in Error: Connection timed out

    any ideas
     
  6. falko

    falko Super Moderator ISPConfig Developer

  7. xaver

    xaver New Member

    Hello,

    i have the same problem and retry setup with 2 or 1 in config form ftp and restart and new cert wont help!

    Problem found: Firewall in ISPConfig -> You need more Ports

    regards
    xaver
     
    Last edited: Jan 21, 2012
  8. DUCKFACE

    DUCKFACE New Member

    ports ...

    how we manage with that problem?
     
  9. kwickcut

    kwickcut Member

Share This Page