Breaking News

Main Menu

Proftpd Link To File Server Lost

четверг 21 мая admin 47

Quote:# This is a basic ProFTPD configuration file (rename it to# 'proftpd.conf' for actual use. It establishes a single server# and a single anonymous login.

# pacman -S proftpd To start the daemon: # systemctl start proftpd.service If you want it to be started automatically at boot: # systemctl enable proftpd.service However, you still need to edit a config file. Is there an alternative ftp server with a web based interface?

Join up with a friend to play online in co-op and make your own adventures with the powerful RPG toolkit.In Divinity:Original Sin you take on the role of a young Source Hunter: your job is to rid the world of those who use the foulest of magics. Discuss your decisions with companions; fight foes in turn-based combat; explore an open world and interact with everything and everyone you see. Divinity original sin multi6 prophet keygen for mac free.

It assumes that you have a user/group# 'nobody' and 'ftp' for normal operation and anon.ServerName 'ProFTPD Default Installation'ServerType standaloneDefaultServer on# Port 21 is the standard FTP port.Port 21# Don't use IPv6 support by default.UseIPv6 off# Umask 022 is a good standard umask to prevent new dirs and files# from being group and world writable.Umask 022# To prevent DoS attacks, set the maximum number of child processes# to 30. If you need to allow more than 30 concurrent connections# at once, simply increase this value.

Note that this ONLY works# in standalone mode, in inetd mode you should use an inetd server# that allows you to limit maximum number of processes per service# (such as xinetd).MaxInstances 30# Set the user and group under which the server will run.User nobodyGroup nogroup# To cause every FTP user to be 'jailed' (chrooted) into their home# directory, uncomment this line.DefaultRoot # Normally, we want files to be overwriteable.AllowOverwrite on# Bar use of SITE CHMOD by defaultDenyAll# A basic anonymous configuration, no upload directories. Configure FTP Server, proftpd:cd /etcEdit proftpd.conf near the top of the file.

It should look like this:#ServerType standaloneServerType inetdThis causes the inetd Daemon to listen and start proftpd as needed.Next, edit inetd.conf. Look for the line:# These are standard services:Below you will see this ftp line.

Uncomment it so it look like thisand proftp will be started/controlled by inetd.# Professional File Transfer Protocol (FTP) server.ftp stream tcp nowait root /usr/sbin/tcpd proftpdNow add it's log files to the logrotate script:su -cd /etc/logrotate.dvi syslog and add:/var/log/proftpd.log to the listMost of these things are already properly configured on Slackware. That wasn't always the case. Just check and make sure, you may not have to do anything.I'm going to guess your problem is this. Quote:ftp:x:14:50::/home/ftp:/bin/falseYou can't log in when the login shell is /bin/false. It needs to be a valid shell like /bin/bash or whatever you like to use./bin/false is a fairly new configuration setting in Slackware. It's an extra security measure to prevent logins to accounts you haven't configured properly.

When you want to enable these things you have to change the shell to something valid.Post back if you have any more issues. I'll try to check back and make sure we get it working for you.CCTVGuru 12:06 AM.

Code:AnonRequirePassword offRequireValidShell offI'm not quite sure what did you mean by thatCorrect, you don't need a valid login shell to use ftp. But, he mentioned he was trying to use the ftp user. So to login as that user, you need a login shell. But to clarify, he doesn't need a valid login shell to login into the ftp prompt, only the shell prompt.

It was late, and I wasn't thinking clearly.Second, and I think it was Slackware 12.2, most of the system users, like apache, ftp, and many others, had /etc/passwd amended to include /bin/false for logins. Prior, this wasn't added. If I'm remembering right, the accounts were only disabled before. /bin/false was an added layer of protection.One last thing. Why not use sftp or scp to transfer the files? FTP isn't necessary, although the transfer is little faster because the encryption overhead isn't there. Just a thought, but running an FTP server is a little less secure.Remember to check your logs because you will invariably get Dictionary attacks on your FTP server.

You'll get them on your ssh server too, but having only one service to attack is generally better than two. Strong passwords are a must! Easy ones get guessed. These are the logs to check:/var/log/messages/var/log/secure//var/log/proftpd.log (as you configured in logrotate)You also may consider a firewall to help with this if the Dictionary attacks get to be a problem. Here's an example of one I wrote with the help of Martin Wolf on his blog:Sorry for the confusion on /bin/false earlier. Nikosis, thanks for the correction.CCTVGuru 01:50 PM. Quote:Jun 16 18:46:47 vmn proftpd3287: warning: the DisplayFirstChdir directive is deprecated and will be removed in a future release.

Please use the DisplayChdir directive.Jun 16 18:46:47 vmn proftpd3287: Fatal:: relative path not allowed in non- sections on line 76 of '/etc/proftpd.conf'Results with attempts to log in - CORE FTP Program:Anyway, I have tried to kog in as an ftp user and I has the same problematic results:When I use the logging as a Hostname/IP/Server name: ftp.domain1.com, I am receiving. Quote:# This is a basic ProFTPD configuration file (rename it to# 'proftpd.conf' for actual use. It establishes a single server# and a single anonymous login.

It assumes that you have a user/group# 'nobody' and 'ftp' for normal operation and anon.ServerName 'ProFTPD Default Installation'ServerType standaloneDefaultServer on# Port 21 is the standard FTP port.Port 21# Don't use IPv6 support by default.UseIPv6 off# Umask 022 is a good standard umask to prevent new dirs and files# from being group and world writable.Umask 022# To prevent DoS attacks, set the maximum number of child processes# to 30. If you need to allow more than 30 concurrent connections# at once, simply increase this value. Note that this ONLY works# in standalone mode, in inetd mode you should use an inetd server# that allows you to limit maximum number of processes per service# (such as xinetd).MaxInstances 30# Set the user and group under which the server will run.User nobodyGroup nogroup# To cause every FTP user to be 'jailed' (chrooted) into their home# directory, uncomment this line.DefaultRoot # Normally, we want files to be overwriteable.AllowOverwrite on# Bar use of SITE CHMOD by default# DenyAll# A basic anonymous configuration, no upload directories. If you do not# want anonymous users, simply delete this entire section.# We want clients to be able to login with 'anonymous' as well as 'ftp'UserAlias anonymous ftp# Limit the maximum number of anonymous loginsMaxClients 10# We want 'welcome.msg' displayed at login, and '.message' displayed# in each newly chdired directory.DisplayLogin welcome.msgDisplayChdir.messageAnonRequirePasswordoffRequireValidShelloff# Limit WRITE everywhere in the anonymous chrootDenyAllHope it is correct, I will keep trying.meetscott 09:36 AM.

Thank you for following up and your concern, meetscott!This FTP.:cry::scratch::mad::confused.I still could NOT come right unfortunately and trying small silly things like experimenting with port forwarding and trying to read around for the recommended best content for proftpd.conf;If you have any working file content please post it here and I'll try edit it!:oPort forwarding was an idea to try hard, because as I said the server is sitting 2 hops away from me (over wireless link).Now I am having another frustrating situation here: Mail services are not right! Sendmail announces.

Lost

I'm pasting the contents of my working proftpd.conf file from the /etc directory. There are almost no customizations in it. It's close to the default shipped in Slackware.

I use ftp on my lan all the time because it's faster than ssh. I use ssh outside my lan or for things I don't care about getting sniffed, I'll still use ftp.I'll get back to you on the sendmail configuration. I use that on multiple servers as well. Sendmail is not easy and I was going to point you to but I guess that's down now. I have some notes about Slackware and setting up email either with an ISP available or with MX records. Are you at home through an ISP?

Let me know so I can supply the proper information and specific instructions.Keep in mind. In my opinion, there is nothing more difficult to set up in Linux than sendmail. That's just been my experience and opinion. But the steps are pretty simple once they are laid out for you. Sendmail's configuration difficulty is the reason why so many people are using things like qmail or postfix. Virsh xml serial console. I still use Sendmail and the reference I have on it is over a 1000 pages! Quote:# This is a basic ProFTPD configuration file.# It establishes a single server and a single anonymous login.# It assumes that you have a user/group 'nobody' and 'ftp'# for normal/anonymous operation.ServerName 'ProFTPD Default Installation'#ServerType standaloneServerType inetdDefaultServer on# Port 21 is the standard FTP port.Port 21# Umask 022 is a good standard umask to prevent new dirs and files# from being group and world writable.Umask 022# To prevent DoS attacks, set the maximum number of child processes# to 30.

If you need to allow more than 30 concurrent connections# at once, simply increase this value. I've been very busy lately. Sorry for the delay in checking on this.I wanted to mention that the default install of Slackware should allow you to start the sendmail daemon. It is also important to note that the directory tree leading up to the root or '/' of the file system only be owned and writable by the root user for security reasons. The path leading up to sendmail configuration files can be a security problem if this is not followed.I think there is something wrong with your file system permissions to give you a 'Permission denied' error.

That's the best I can do for your particular problem with this amount of information.The next thing I need, to help you with Sendmail configuration, is whether you are configuring MX records or just using your ISP as a 'Smart Host.' I hope you haven't given up.

System administration is a high paying skill. I actually write code for a living but I end up doing a lot of System Adminstration as well. Be patient as you learn about this stuff. It takes years to really exploit some of these features.

It is what makes this forum and Linux in general so much fun!All times are GMT -5. The time now is 06:50 PM.