Bekijk de volledige versie : vsftp does not work
I have installed vsftp using Macsat tutorial. Process starts but I have timeout on client side. This is a syslog:
Jun 18 20:07:05 xinetd[115]: xinetd Version 2.3.13 started with no options compiled in.
...
Jun 18 20:08:23 xinetd[115]: START: ftp pid=140 from=192.168.x.x
...
Jun 18 20:09:43 xinetd[140]: FAIL: ftp address from=192.168.x.x
What is wrong?
I have got the same problem and the same log and I am running out of ideas, what is behind it. I only know it has nothing to do with the firewall (I shut it down and problem persisted). It is strange because it worked for a while last week (before I start playing around wit thttpd-php - sadlt it is not workig either). The only diference from Tim`s case seems to be that both the web server and ftp are reachable from the lan side, I cannot connect from the wan side though (smart ftp says this:
Resolving host name 10.102.236.214...
Connecting to (10.102.236.214) -> IP: 10.102.236.214 PORT: 21
Connected to (10.102.236.214) -> Time = 10ms
Socket connected waiting for login sequence.
Cannot login waiting to retry (30s).
Just found out that when I disable ftp server through the webinterface, smartftp says "No response from the server" - seems strange to me since I am using vsftpd and not stupid-ftpd:-/. from lan it works the same both ways.
my log is actually this
Jun 20 23:53:47 xinetd[157]: START: ftp pid=216 from=194.108.97.160
Jun 20 23:53:47 xinetd[216]: FAIL: ftp address from=194.108.97.160
Jun 20 23:53:51 kernel: DROPIN=eth1 OUT= MAC=00:11:2f:86:8e:f0:00:80:48:1e:6b:84:08:00 SRC=194.108.97.160 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x20 TTL=115 ID=3891 DF PROTO=TCP SPT=1630 DPT=81 SEQ=413564094 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204057001010402)
Jun 20 23:53:54 kernel: DROPIN=eth1 OUT= MAC=00:11:2f:86:8e:f0:00:80:48:1e:6b:84:08:00 SRC=194.108.97.160 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x20 TTL=115 ID=3892 DF PROTO=TCP SPT=1630 DPT=81 SEQ=413564094 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204057001010402)
Jun 20 23:54:01 kernel: DROPIN=eth1 OUT= MAC=00:11:2f:86:8e:f0:00:80:48:1e:6b:84:08:00 SRC=194.108.97.160 DST=192.168.1.1 LEN=48 TOS=0x00 PREC=0x20 TTL=115 ID=3893 DF PROTO=TCP SPT=1630 DPT=81 SEQ=413564094 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204057001010402)
(194... ip adress is a dynamic adress - I am using my back-up phone modem connection to test the access from wan) - I am no really sure, what this means, it looks like the connection is estabilished, but then something for some reason closes it. I think it does not have anything to do with firewall, because if I shut it down, it is just the same. So it looks like the problem is somewhere deeper in the device, which is exactly what I do not understand a damn bit - maybe a complete reinstall of the packages, firmaware and so will help, will try as soon as I got some spare time.
(oh, by the way - I was using the 5a and 6a firmware and it is just about the same with both of them)
well, the problem with the web will be in the firewall after all, because when I shut it down, it works.
However, about the ftp - do I need any port forwarding in virtual server? Ergo 20:21 to 21 on 192.168.1.1?
I've solved this using manual installation.
post-boot invokes another batch:
#!/bin/sh
killall xinetd
killall stupid-ftpd
cp /opt/tim/stupid-ftpd.conf /tmp
stupid-ftpd
Thus we kill all processes that can probably utilize ftp port and then starts simple stupid-ftp with given conf.
Here it is:
mode=daemon
serverroot=/opt/ftp_pub
banmsg=You have no permission
log=/tmp/stupid-ftpd.log
port=21
maxusers=12
login-timeout=120
timeout=240
user=login pass / 2 A
and of course you should open ftp port:
iptables -D INPUT -j DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -j DROP
I can confirm that Timīs solution works for me as well, however I do not really want to run stupid-ftpd deamon:-(
fastclick
24-06-2005, 10:34
I guess your problem resides in an invalid configuration of the xinet.d
in the corresponding conf-file there should be a section to config the hosts which are allow to connect.
add your host/s
Thanks very much for suggesting this, becasue it actually solved my problem (at least now it is working, just hoping it stays so). I added this line
only_from = 0.0.0.0/0 to the xinetd config file (located here in my case: /opt/etc/xinetd.d/vsftp) - probably just another solution would be to make vsftpd run in standalone (did not try though).