Zeige Beiträge
Wie schon der Titel beschreibt, komme ich vom Netzwerk aus auf den FTP drauf, aber vom Internet aus, geht das leider nicht. Bei meinem Router habe ich Firewall, Filterregeln etc ausgestellt und Port 21 an den Linux Rechner weitergeleitet. Nun poste ich paar Auszüge aus der Kommando Zeile.
1. proftpd.conf
ServerName "DaBoys FTP "
ServerType Inetd
DefaultServer on
# Port 21 is the standard FTP port.
Port 21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022
# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances 30
# Set the user and group under which the server will run.
User nobody
Group nogroup
# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot /Daten/FTP
# Normally, we want files to be overwriteable.
AllowOverwrite on
2. Proftpd im Debug Modus
linux-serer:/usr/local/etc # proftpd -n -d5
- parsing '/usr/local/etc/proftpd.conf' configuration
linux-serer.site -
linux-serer.site - Config for DaBoys FTP :
linux-serer.site - DefaultServer
linux-serer.site - Umask
linux-serer.site - UserID
linux-serer.site - UserName
linux-serer.site - GroupID
linux-serer.site - GroupName
linux-serer.site - DefaultRoot
linux-serer.site - AllowOverwrite
linux-serer.site - deleting existing scoreboard '/usr/local/var/proftpd/proftpd.scoreboard'
linux-serer.site - ProFTPD 1.2.10 (stable) (built Sun Feb 20 16:07:42 CET 2005) standalone mode STARTUP
3. tcpdumb Auswertung (erst über Internet auf Server versucht zu zugrieifen, dann über netzwerk)
linux-serer:/Daten/Daten # tcpdump port 21
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
20:41:45.759171 IP 217.82.32.20.sybase-sqlany > linux-serer.site.ftp: S 737645595:737645595(0) win 65535 <mss 1452,nop,nop,sackOK>
20:41:48.685930 IP 217.82.32.20.sybase-sqlany > linux-serer.site.ftp: S 737645595:737645595(0) win 65535 <mss 1452,nop,nop,sackOK>
20:41:54.695357 IP 217.82.32.20.sybase-sqlany > linux-serer.site.ftp: S 737645595:737645595(0) win 65535 <mss 1452,nop,nop,sackOK>
20:42:07.379392 IP 217.82.32.20.vlsi-lm > linux-serer.site.ftp: S 743108536:743108536(0) win 65535 <mss 1452,nop,nop,sackOK>
20:42:10.320109 IP 217.82.32.20.vlsi-lm > linux-serer.site.ftp: S 743108536:743108536(0) win 65535 <mss 1452,nop,nop,sackOK>
20:42:17.495239 IP 192.168.0.2.saiscm > linux-serer.site.ftp: S 745669077:745669077(0) win 65535 <mss 1452,nop,nop,sackOK>
20:42:17.495301 IP linux-serer.site.ftp > 192.168.0.2.saiscm: S 1167546791:1167546791(0) ack 745669078 win 5840 <mss 1460,nop,nop,sackOK>
20:42:17.495431 IP 192.168.0.2.saiscm > linux-serer.site.ftp: . ack 1 win 65535
20:42:17.517579 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 1:56(55) ack 1 win 5840
20:42:17.518031 IP 192.168.0.2.saiscm > linux-serer.site.ftp: P 1:13(12) ack 56 win 65480
20:42:17.518086 IP linux-serer.site.ftp > 192.168.0.2.saiscm: . ack 13 win 5840
20:42:17.520195 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 56:90(34) ack 13 win 5840
20:42:17.523933 IP 192.168.0.2.saiscm > linux-serer.site.ftp: P 13:27(14) ack 90 win 65446
20:42:17.563853 IP linux-serer.site.ftp > 192.168.0.2.saiscm: . ack 27 win 5840
20:42:17.567220 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 90:117(27) ack 27 win 5840
20:42:17.586983 IP 192.168.0.2.saiscm > linux-serer.site.ftp: P 27:32(5) ack 117 win 65419
20:42:17.587021 IP linux-serer.site.ftp > 192.168.0.2.saiscm: . ack 32 win 5840
20:42:17.587855 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 117:148(31) ack 32 win 5840
20:42:17.594030 IP 192.168.0.2.saiscm > linux-serer.site.ftp: P 32:56(24) ack 148 win 65388
20:42:17.595126 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 148:177(29) ack 56 win 5840
20:42:17.597930 IP 192.168.0.2.saiscm > linux-serer.site.ftp: P 56:64(
ack 177 win 6535920:42:17.598507 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 177:196(19) ack 64 win 5840
20:42:17.601743 IP 192.168.0.2.saiscm > linux-serer.site.ftp: P 64:70(6) ack 196 win 65340
20:42:17.603338 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 196:250(54) ack 70 win 5840
20:42:17.623755 IP linux-serer.site.ftp > 192.168.0.2.saiscm: P 250:274(24) ack 70 win 5840
20:42:17.623901 IP 192.168.0.2.saiscm > linux-serer.site.ftp: . ack 274 win 65262
20:42:26.055661 IP 192.168.0.2.saiscm > linux-serer.site.ftp: F 70:70(0) ack 274 win 65262
20:42:26.056714 IP linux-serer.site.ftp > 192.168.0.2.saiscm: F 274:274(0) ack 71 win 5840
20:42:26.056897 IP 192.168.0.2.saiscm > linux-serer.site.ftp: . ack 275 win 65262
4. Nmap Auswertung
Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2005-02-26 21:44 CET
Interesting ports on linux-serer.site (192.168.0.5):
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
111/tcp open rpcbind
139/tcp open netbios-ssn
445/tcp open microsoft-ds
901/tcp open samba-swat
Wenn ich proftpd im Debug modus starte und mich dann übers Internet auf den FTP Server connecten will, wird nichts angezeigt auf der Konsole.
Ich hoffe ich bekomme hier paar Denkanstöße
Danke
