comp.os.linux.networking

On Mar 5, 9:43=A0pm, Greg wrote:
> On Mar 5, 6:45=A0pm, david wrote:
>
>
>
> > On Wed, 05 Mar 2008 10:57:42 -0800, Greg rearranged some electrons to sa=
y:
>
> > > On Mar 5, 2:18=A0am, david wrote:
> > >> On Tue, 04 Mar 2008 23:56:47 -0800, Greg rearranged some electrons to=

> > >> say:
>
> > >> > Hey everyone I had the vsftpd working on my cable modem and then we=

> > >> > transfered it to the office which is behind aNetopia3000 router.
> > >> > Now we get a connection timeout when we try and use the ftp from th=
e
> > >> > outside. =A0Has anyone had this problem? =A0I have the port forward=
ing
> > >> > setup for UDP and TCP on ports 21 and 20. =A0Is there anything more=
I
> > >> > need to do? =A0I also have apache going and port 80 open and it wor=
ks
> > >> > perfectly. Any help would be appreciated.
>
> > >> > Greg
>
> > >> If you're using passive mode, you also have to forward whatever ports=

> > >> you have vsftpd using for that.
>
> > >> See:http://vsftpd.beasts.org/vsftpd_conf.html#lbAFpasv_max_portand
> > >> pasv_min_port
>
> > > Alright..I don't remember having to do this on my dlink but I will loo=
k
> > > into this. =A0How come it works for the anonymious log-in on passive m=
ode?
>
> > Perhaps you have something else broken in your vsftpd.conf file. =A0Post=
it
> > here so it can be looked at perhaps?- Hide quoted text -
>
> > - Show quoted text -
>
> # Example config file /etc/vsftpd/vsftpd.conf
> #
> # The default compiled in settings are fairly paranoid. This sample
> file
> # loosens things up a bit, to make the ftp daemon more usable.
> # Please see vsftpd.conf.5 for all compiled in defaults.
> #
> # READ THIS: This example file is NOT an exhaustive list of vsftpd
> options.
> # Please read the vsftpd.conf.5 manual page to get a full idea of
> vsftpd's
> # capabilities.
> #
> # Allow anonymous FTP? (Beware - allowed by default if you comment
> this out).
> anonymous_enable=3DYES
> #
> # Uncomment this to allow local users to log in.
> local_enable=3DYES
> #
> # Uncomment this to enable any form of FTP write command.
> write_enable=3DYES
> #
> # Default umask for local users is 077. You may wish to change this to
> 022,
> # if your users expect that (022 is used by most other ftpd's)
> local_umask=3D022
> #
> # Uncomment this to allow the anonymous FTP user to upload files. This
> only
> # has an effect if the above global write enable is activated. Also,
> you will
> # obviously need to create a directory writable by the FTP user.
> #anon_upload_enable=3DYES
> #
> # Uncomment this if you want the anonymous FTP user to be able to
> create
> # new directories.
> #anon_mkdir_write_enable=3DYES
> #
> # Activate directory messages - messages given to remote users when
> they
> # go into a certain directory.
> dirmessage_enable=3DYES
> #
> # Activate logging of uploads/downloads.
> xferlog_enable=3DYES
> #
> # Make sure PORT transfer connections originate from port 20 (ftp-
> data).
> connect_from_port_20=3DYES
> #
> # If you want, you can arrange for uploaded anonymous files to be
> owned by
> # a different user. Note! Using "root" for uploaded files is not
> # recommended!
> chown_uploads=3DYES
> chown_username=3Dgshirey
> #
> # You may override where the log file goes if you like. The default is
> shown
> # below.
> #xferlog_file=3D/var/log/vsftpd.log
> #
> # If you want, you can have your log file in standard ftpd xferlog
> format
> xferlog_std_format=3DYES
> #
> # You may change the default value for timing out an idle session.
> idle_session_timeout=3D6000
> #
> # You may change the default value for timing out a data connection.
> data_connection_timeout=3D1200
> #
> # It is recommended that you define on your system a unique user which
> the
> # ftp server can use as a totally isolated and unprivileged user.
> #nopriv_user=3Dftpsecure
> #
> # Enable this and the server will recognise asynchronous ABOR
> requests. Not
> # recommended for security (the code is non-trivial). Not enabling it,
> # however, may confuse older FTP clients.
> #async_abor_enable=3DYES
> #
> # By default the server will pretend to allow ASCII mode but in fact
> ignore
> # the request. Turn on the below options to have the server actually
> do ASCII
> # mangling on files when in ASCII mode.
> # Beware that on some FTP servers, ASCII support allows a denial of
> service
> # attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd
> # predicted this attack and has always been safe, reporting the size
> of the
> # raw file.
> # ASCII mangling is a horrible feature of the protocol.
> #ascii_upload_enable=3DYES
> #ascii_download_enable=3DYES
> #
> # You may fully customise the login banner string:
> #ftpd_banner=3DWelcome to blah FTP service.
> #
> # You may specify a file of disallowed anonymous e-mail addresses.
> Apparently
> # useful for combatting certain DoS attacks.
> #deny_email_enable=3DYES
> # (default follows)
> #banned_email_file=3D/etc/vsftpd/banned_emails
> #
> # You may specify an explicit list of local users to chroot() to their
> home
> # directory. If chroot_local_user is YES, then this list becomes a
> list of
> # users to NOT chroot().
> #chroot_list_enable=3DYES
> # (default follows)
> #chroot_list_file=3D/etc/vsftpd/chroot_list
> #
> # You may activate the "-R" option to the builtin ls. This is disabled
> by
> # default to avoid remote users being able to cause excessive I/O on
> large
> # sites. However, some broken FTP clients such as "ncftp" and "mirror"
> assume
> # the presence of the "-R" option, so there is a strong case for
> enabling it.
> #ls_recurse_enable=3DYES
> #
> # When "listen" directive is enabled, vsftpd runs in standalone mode
> and
> # listens on IPv4 sockets. This directive cannot be used in
> conjunction
> # with the listen_ipv6 directive.
> listen=3DYES
> #
> # This directive enables listening on IPv6 sockets. To listen on IPv4
> and IPv6
> # sockets, you must run two copies of vsftpd whith two configuration
> files.
> # Make sure, that one of the listen options is commented !!
> #listen_ipv6=3DYES
>
> pam_service_name=3Dvsftpd
> userlist_enable=3DYES
> tcp_wrappers=3DYES
> accept_timeout=3D300
> connect_timeout=3D300
> idle_session_timeout=3D500
> use_localtime=3DYES
>
> There it is. =A0It is weird though, anything requiring a password
> remotely hangs a little bit. =A0Even when I ssh in it takes a bit more
> time than normal.- Hide quoted text -
>
> - Show quoted text -

I switched to proftpd and everything is all good now.