Setup Firewall settings for FTP

I had placed that line in the iptables file and found nothing to happen from it. Is it possible that my error can be with ProFTPD or should I get some sort of connection here regardless?

I know the line you wrote should work though.

Did you restart iptables after adding that line?

Yes. I even tried rebooting the server. Would ProFTPD be able to stop the connection, or would it only facilitate the account login attempt and reject that?

This is the line that comes up when I run the command "netstat -nlpt"

tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN      15560/proftpd: (acc

As well, how would I be sure that modprobe is loaded. I did a file name check to see if a reference to a file had the same name which there is a file with the name modprobe.

I noticed that the ip address is 0.0.0.0 but running of the correct port. Maybe a setting in the proftpd configuration would need to be set.

Thanks again

Actually this looks ok - the 0.0.0.0 means that it's listening on all network interfaces the numbers at the end are your process id and the name of the daemon.

What happens when you turn the firewall off by running the command:

service iptables stop

If you get an error can you post it? Also please post the error that you get while trying to connect when the firewall is enabled.

Mark

Hey,

I have stopped the server and this is what I get:

[root@u15320204 sysconfig]# service iptables stop
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: security raw nat mangle fi[FAILED]
Unloading iptables modules:                                [  OK  ]
[root@u15320204 sysconfig]#

As for my connection to the FTP I am using Dreamweaver by Adobe. I can't copy the error but it basically says that My Firewall settings are not set correctly.

Here is a copy of my proftpd conf file:

# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName                      "drcdn FTP Server"
ServerType                      standalone
DefaultServer                   on
DeferWelcome                    on
MaxInstances                    30
TimeoutStalled                  300

# Port 21 is the standard FTP port.
Port                            21

# Don't use IPv6 support by default.
UseIPv6                         off

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                           022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances                    30

# Set the user and group under which the server will run.
User                            droomftp
Group                           webftp

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~

# Normally, we want files to be overwriteable.
AllowOverwrite          on

# Bar use of SITE CHMOD by default
<Limit SITE_CHMOD>
  DenyAll
</Limit>

<Limit LOGIN>
        DenyAll
</Limit>

I am looking to setup a Virtual Host for a client to access the home directory for their account.

I hope this helps.

Thank you!

Daniel

What happens when you use a regular FTP client? For example FTP from the command line with this:

ftp <hostname>

Also if you are using windows or MAC do you have the machine firewall enabled, this could also cause a similar error.

I get that it is connected and that the server running is ProFTPD 1.3.2a. So that is good. Then it asks for this next line:

Name (designitroom.com:root):

What should be typed in here? Or is the error in the configuration file for proFTPD because I don't have a Virtual host setup properly?

Looks like it's asking for a userid, the default looks like it's set to root - which may be a misconfiguration or it could be just something it suggests the first time around.

Your getting connected through a regular FTP connection (via the command line) - I would actually start looking at your dreamweaver configuration, because that's where you're still getting the failure.

hey,

When I type on the command line: "ftp designitroom.com" this message comes up: "421 Service not available, remote server has closed connection"

Would you know what this means?

Take a look at this link: http://help.globalscape.com/help/support/Error_Codes/FTP_Codes.htm

So I managed to get it to connect. I believe the error was that the Authorization files for user and group were not referenced correctly.

I am trying to connect to my FTP server using Dreamweaver and the problem persists. I run the command

netsat -tap | grep proftpd

and get this:

tcp        0      0 *:ftp                       *:*                         LISTEN      17599/proftpd: (acc

I have used both passive and non-passive mode and am a little lost from here.

Any suggestions?

If you can connect via command line then the problem lies within Dreamweaver not the ftp server. If you have support with Adobe I would call them and let them take a look. If not you could always ask someone from the experts-exchange dreamweaver group.

Ps. sorry for the late response.

Thanks,

M.

Hey,

So I realized what the Firewall error was when I was connecting remotely. I think the order or Firewall settings in the iptables source file was incorrectly ordered. So now I am able to connect from Dreamweaver. One last question if possible and then I can close this question off.

If I am running the Proftpd server under the user webserv, and then logging in using another user name but under the same group webftp, the permission and access is denied. So I guess my question would be, how should the user name and setting be set so I can use one user account to run the server but give access to client FTP directories under another user account to upload?

Thanks for your help!

Daniel

Can you do an ls -l and post the out put of the file -- doesn't have to be your actual files, it could be a test file in this case.

Where I'm going with this is - you have to have the user in the same group which you've done, but you also need to give the "group" permissions to read/write the files. So you would want to make sure that your file permissions would look like this:

  U   G   O
-----------------
 -rw-rw-r--   <file owner>   <file group>   <filename>

The "U G O" stands for user, group, owner (respectively). You can test by changing the permission on the test file by doing this:

chmod g+rw <test file>

Thanks,

M.

Hey,

I tried your suggestion and it does not work, but here is the output anyway, so maybe I am missing something:

drwxrwxr-x 6 webserv webftp  112 Sep 13 14:59 .
drwxrwxr-x 5 root    root     40 Jul 24 12:56 ..
drwxrwxr-x 8 webserv webftp  103 Sep 17 21:12 apps
-rwxrwxr-x 1 webserv webftp 6148 Sep 20 20:27 .DS_Store
-rw-rw-r-- 1 webserv webftp 5533 Sep 25 00:53 index.axs
drwxrwxr-x 5 webserv webftp   52 Sep 13 14:58 lib
-rw-rw-r-- 1 webserv webftp 3699 Sep 20 20:29 login.axs
drwxrwxr-x 8 webserv webftp   80 Sep 21 21:29 nets
-rw-rw-r-- 1 webserv webftp 3408 Sep 20 20:30 srq.axs
drwxrwxr-x 9 webserv webftp 4096 Sep 13 14:59 users


Thanks again!

Hey,

It is allowing me to upload the file through dreamweaver when I give the owner the ability to write.

What do you think?

Thank YOU!