ubuntu 11.10 and ftp problems

Discussion in 'Server Operation' started by 614cooker, May 11, 2012.

  1. 614cooker

    614cooker New Member

    I would not say im new at linux I have been using it for years but this is the first time that I have had to setup a server. well let me go thou the problem. I have followed http://www.howtoforge.com/perfect-server-ubuntu-11.10-ispconfig-3 to the Tee. I have setup everything that it states. I have setup a user in ispconfig with a website, and ftp account. Now the problem is I cant access the ftp account through a ftp client I have tried everything from changing from passive to active. All ports are open. I have tried both port 21 and 22 (FTP AND SFTP) but my server will just not allow me to access it.

    In filezilla i get this error
    Error: Authentication failed.
    Error: Critical error
    Error: Could not connect to server

    I have DMZ my router and opened both ssh, ftp and sftp ports.

    Im just at a complete loss apart from this the server is working.

    If someone could please help I need to get it up and running as soon as possible.
     
  2. falko

    falko Super Moderator

    What's the output of
    Code:
    netstat -tap
    ?

    Are there any FTP errors in your logs?
     
  3. 614cooker

    614cooker New Member

    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 localhost.localdo:10024 *:* LISTEN 906/amavisd (master
    tcp 0 0 localhost.localdo:10025 *:* LISTEN 1549/master
    tcp 0 0 *:mysql *:* LISTEN 750/mysqld
    tcp 0 0 *:http-alt *:* LISTEN 32329/apache2
    tcp 0 0 *:www *:* LISTEN 32329/apache2
    tcp 0 0 *:tproxy *:* LISTEN 32329/apache2
    tcp 0 0 *:ftp *:* LISTEN 28742/pure-ftpd (SE
    tcp 0 0 server1.gettafor:domain *:* LISTEN 757/named
    tcp 0 0 localhost.locald:domain *:* LISTEN 757/named
    tcp 0 0 *:ssh *:* LISTEN 578/sshd
    tcp 0 0 *:smtp *:* LISTEN 1549/master
    tcp 0 0 localhost.localdoma:953 *:* LISTEN 757/named
    tcp 0 0 *:https *:* LISTEN 32329/apache2
    tcp 0 52 server1.gettaforum.:ssh 192.168.0.4:eek:penvpn ESTABLISHED 16421/sshd: adminis
    tcp6 0 0 [::]:pop3s [::]:* LISTEN 1436/couriertcpd
    tcp6 0 0 [::]:pop3 [::]:* LISTEN 1408/couriertcpd
    tcp6 0 0 [::]:imap2 [::]:* LISTEN 1358/couriertcpd
    tcp6 0 0 [::]:ftp [::]:* LISTEN 28742/pure-ftpd (SE
    tcp6 0 0 [::]:domain [::]:* LISTEN 757/named
    tcp6 0 0 [::]:ssh [::]:* LISTEN 578/sshd
    tcp6 0 0 ip6-localhost:953 [::]:* LISTEN 757/named
    tcp6 0 0 [::]:imaps [::]:* LISTEN 1386/couriertcpd
     
  4. falko

    falko Super Moderator

    Looks ok. What about the logs?

    Can you also post the output of
    Code:
    iptables -L
    ?
     
  5. 614cooker

    614cooker New Member

    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
    fail2ban-courierimaps tcp -- anywhere anywhere multipo rt dports imaps
    fail2ban-courierpop3s tcp -- anywhere anywhere multipo rt dports pop3s
    fail2ban-courierimap tcp -- anywhere anywhere multipor t dports imap2
    fail2ban-sasl tcp -- anywhere anywhere multiport dport s smtp
    fail2ban-courierpop3 tcp -- anywhere anywhere multipor t dports pop3

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain fail2ban-courierimap (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierimaps (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierpop3 (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierpop3s (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-sasl (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-ssh (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    right I have gotten access through my local lan but I still can not get access from a external ip e.g. friends house. I still dont think it is a router problem as i can reach my server but it will not allow ftps access from a external ip
     
  6. falko

    falko Super Moderator

    Please check your router settings. Make sure ports 20 and 21 are open.
     
  7. 614cooker

    614cooker New Member

    Well i have checked my router porst 21 and 22 is deffently open i have even pinged my server from a external ip and it is open so it has to be a problem else where
     

Share This Page