RE: Anonymous Proftp setup problems
Nate, thank you for this response,
I am behind my router's firewall, but set up with static external and
internal IPs:
In Proftp (global) I Set up:
UseReverseDNS off
IdentLookups off
MasqueradeAddress 000.000.000.00 of the servers internal IP
PassivePorts 60000-65535
and set up my router to listen on 21 and 60000-65535
and I still get timed out:
COMMAND:> PASV
227 Entering Passive Mode (internal.server.ip.no,251,62).
COMMAND:> LIST
STATUS:> Connecting ftp data socket internal.server.ip.no:64318...
ERROR:> Timeout.
I did #fuser -n tcp 21 and got:
21/tcp: 230
I really don't know what that means. I do not have a user 230
I also did netstat -an | grep 21 and got a bunch of stuff, but didn't see
anything that rang any bells. But here too I really do not know what I am
looking for.
Best Wishes!
Mike Olds www.buddhadust.org
-----Original Message-----
From: nate [mailto:debian-user@aphroland.org]
Sent: Thursday, October 24, 2002 1:13 PM
To: debian-user@lists.debian.org
Subject: Re: Anonymous Proftp setup problems
Michael Olds said:
> I am unable to get Proftp Anonymous ftp working (download only; "real"
> use on the internal network is working fine), and am hoping that someone
you mention "internal" network. to me this makes me think you
are running it behind NAT. passive ftp does not work well with NAT.
try your client in ACTIVE ftp mode or put the ftp server infront
of your NAT box.
>
> If I run proftpd -nd5 debugging I get:
>
> The error log reads: failed binding to 0.0.0.0, port 21; address already
> in use
run fuser -n tcp 21
if that doesn't turn up anything then check
netstat -an | grep 21
sounds like your problem is NAT though, serving FTP data behind
dynamic NAT is not a good idea. FTP works fine if you use static
NAT(1 external IP maps to 1 internal ip on all ports). I have only
done this on cisco routers though.
nate
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Reply to: