Moin,

Super danke, das wars.




air

Moin,

Hab TLS eingeschaltet mit einem Self Signed Cert. Alles klappt wunderbar, aaaber.
Wenn der client sich verbindet, und die authentifizierung durch ist, beginnt der client anfragen mit dem port 33004+ abzusenden. Auf der FW ist aber nur 20-21 für FTP frei. Woran liegt das?

hier die TLS section.

<IfModule mod_tls.c>

TLSEngine on

TLSLog /var/log/proftpd/proftpd_tls.log

TLSProtocol TLSv1

TLSRequired off

TLSVerifyClient off

TLSRSACertificateFile /usr/local/etc/ftpcert/host.cert

TLSRSACertificateKeyFile /usr/local/etc/ftpcert/host.key

</IfModule>

gruss Air.

Moin,
hab ein RPM installiert, nun geht's. Lass ich erstmal vorläufig.

gruss und danke für den tip .

air

>SIG 11 = Crash... Selber kompiliert ?
Ja sicher.. wie es sich gehört.

cheers

Air

Moin,

ich hab die suche benutzt und leider nix gefunden. Also versuche ich "mal eben" was zu posten.

Meine konfig ist die basic_config aus dem tar, nur ich hab DefaultRoot~ enabled. Und das ganze soll auf Redhat Enterprise ES laufen.

Hier die config:
# BOF
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName                      "ProFTPD Default Installation"
ServerType                      standalone
DefaultServer                   on

# Port 21 is the standard FTP port.
Port                            21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                           022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances                    30

# Set the user and group under which the server will run.
User                            ftp
Group                           ftp

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~

# Normally, we want files to be overwriteable.
AllowOverwrite          on

# Bar use of SITE CHMOD by default
<Limit SITE_CHMOD>
  DenyAll
</Limit>
# A basic anonymous configuration, no upload directories.  If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous ~ftp>
  User                          ftp
  Group                         ftp

  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias                     anonymous ftp

  # Limit the maximum number of anonymous logins
  MaxClients                    10

  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin                  welcome.msg
  DisplayFirstChdir             .message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
</Anonymous>

#EOF

Wenn die der DefaultRoot ~ eintrag vorhanden ist, und ich mit einlogge, funzt "ls -l" nicht.

Antwort vom server:

Name (localhost:root): test
331 Password required for test.
Password:
230 User test logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
227 Entering Passive Mode (127,0,0,1,128,93).
421 Service not available, remote server has closed connection
ftp>


folgender debug -10 war zu sehen:
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching LOG_CMD command 'PASS (hidden)' to mod_log
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching PRE_CMD command 'SYST' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching PRE_CMD command 'SYST' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching CMD command 'SYST' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching LOG_CMD command 'SYST' to mod_log
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching PRE_CMD command 'PASV' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching PRE_CMD command 'PASV' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching CMD command 'PASV' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - in dir_check_full(): path = '/', fullpath = '/home/test/'.
xx xx xx (localhost.localdomain[127.0.0.1]) - FS: using system stat()
xx xx xx (localhost.localdomain[127.0.0.1]) - FS: using system stat()
xx xx xx (localhost.localdomain[127.0.0.1]) - Entering Passive Mode (127,0,0,1,128,93).
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching LOG_CMD command 'PASV' to mod_log
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching PRE_CMD command 'LIST' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching PRE_CMD command 'LIST' to mod_core
xx xx xx (localhost.localdomain[127.0.0.1]) - dispatching CMD command 'LIST' to mod_ls
xx xx xx (localhost.localdomain[127.0.0.1]) - ProFTPD terminating (signal 11)
xx xx xx (localhost.localdomain[127.0.0.1]) - FTP session closed.
#EOF

Hab ich vollpfosten etwas in der config vergessen? Mein verständnis war, dass der DefaultRoot eintrag so reichen würde.

Würd mich freuen wir ihr mal drüberschauen könntet.

Schönes heisses wetter noch und danke.

MfG
Airborndragger