pureftpd ban ip from lan & ftp ok users

Discussion in 'General' started by misuv, Apr 29, 2014.

  1. misuv

    misuv New Member

    Hi

    I have a problem, can anyone help me?

    I created some ftp users in ISPConfig and was ok I could connect, but from yesterday pureftpd started to ban all my connections from this ftp users.

    When try to connect are banned the ip's from my lan & from external IP's.

    any sugestions?

    Regards Mihai
     
  2. lovendo

    lovendo New Member

    could you paste the ftp log?
     
  3. misuv

    misuv New Member

    logs

    fail2ban-log
    Code:
    2014-04-29 16:14:58,208 fail2ban.actions: WARNING [pureftpd] Ban 192.168.1.99
    2014-04-29 16:24:58,829 fail2ban.actions: WARNING [pureftpd] Unban 192.168.1.99
    
    System-log
    Code:
    Apr 29 17:09:23 server1 pure-ftpd: ([email protected]) [INFO] New connection from 192.168.1.99
    Apr 29 17:09:23 server1 pure-ftpd: ([email protected]) [ERROR] The SQL server seems to be down [Access denied for user 'ispconfig'@'127.0.0.1' (using password: YES)]
    Apr 29 17:09:23 server1 pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address
    
    ftp log
    Code:
    Connect to: (04/29/2014 17:17:47)
    hostname=192.168.1.100
    username=###
    startdir=web
    
     
  4. lovendo

    lovendo New Member

    Maybe the problem is not with pureftpd nor fail2ban, but with the MySQL server

    Code:
    [ERROR] The SQL server seems to be down [Access denied for user 'ispconfig'@'127.0.0.1' (using password: YES)]
    I'm by far not an expert on ISPConfig, but let's suppose it uses a database for storing the ftp-users' passwords. That would explain why connections can't be established, so then fail2ban executes the rules to ban that IP.

    I would suggest you to:
    - remove the bans
    - stop the fail2ban service
    - start the mysql daemon
    - try to connect to the FTP server as usually

    Tell us later how it has gone.
     

Share This Page