Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

ProFTPD Passive Configuration

Discussion in 'General Discussion' started by wh7702, Mar 13, 2005.

  1. wh7702

    wh7702 Member

    Joined:
    Mar 13, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    151
    Hello all.

    I seem to be having issues getting ProFTP to listen/communicate on passive ports.

    I've added

    PassivePorts 1025 1050

    to my proftpd.conf file

    and opened 1025 - 1050 on my filewall, however it dosnt seem to be working properly.

    I dont seem to find much on these forums or at the proftp wages either...

    Any suggestions/comments?

    Matt
     
    #1 wh7702, Mar 13, 2005
  2. DigitalN

    DigitalN Well-Known Member

    Joined:
    Sep 23, 2004
    Messages:
    420
    Likes Received:
    1
    Trophy Points:
    168
    How many clients do you have ? You'd usually need more than 25 ports for passive usage, maybe twice the number of your clients would be a rule of thumb.
     
    #2 DigitalN, Mar 13, 2005
  3. wh7702

    wh7702 Member

    Joined:
    Mar 13, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    151
    I'm the only one connected...
     
    #3 wh7702, Mar 13, 2005
  4. wh7702

    wh7702 Member

    Joined:
    Mar 13, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    151
    Cant seem to put my finger on it.

    netstat confirms pureftp (switched to pureftpd btw) is running properly and utilizing the correct ports.

    I can connect to the server, browse directories, and even download data. However, when I try to place data on the server, I get a 550 error. Normally 550 is no permissions, however I do have permissions, and if I remove the firewall it does allow me to upload data fine.

    I have 21,1025-1050 open.

    Should work fine or am I missing someting?

    Matt
     
    #4 wh7702, Mar 13, 2005
  5. DigitalN

    DigitalN Well-Known Member

    Joined:
    Sep 23, 2004
    Messages:
    420
    Likes Received:
    1
    Trophy Points:
    168
    Try opening port 20 in your firewall as well - that may help.
     
    #5 DigitalN, Mar 13, 2005
  6. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,460
    Likes Received:
    22
    Trophy Points:
    463
    Location:
    Go on, have a guess
    Are you using an SPI firewall such as APF? If so, there's no need at all to open up ephemeral ports for PASV FTP, as they're allowed due to the existing port 21 connection. IF that is the case, there's also no need to specify the port range in the ftp daemon configuration since any unused ephemeral port will do.

    If you're using a non-SPI firewall, do you actually login and then it freezes? If you cannot even login, then the problems are elsewhere since it doesn't enter PASV mode until you've authenticated (IIRC).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 chirpy, Mar 14, 2005
  7. wh7702

    wh7702 Member

    Joined:
    Mar 13, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    151
    I figured it out.

    When I enabled "FTP Services" on the firewall, it turned on "FTP Proxy Services". No indication at all thats what it was. I blindly assumed "FTP Services" meant it was opening 20/21, then I added 1025-1050. Wasnt the case...

    All is well now.

    Thanks guys,

    Matt
     
    #7 wh7702, Mar 14, 2005
  8. procam

    procam Well-Known Member

    Joined:
    Nov 24, 2003
    Messages:
    122
    Likes Received:
    0
    Trophy Points:
    166
    Why is it that what you say simply doesnt work in this case ??
    I have diddled with this on numerous servers off and on for MONTHS ~ my solution at best is to open 35000_36000 in apf and open them and uncomment the pureftp conf to passive connections on 35000 36000 and ftp works as it should - if I remove those ftp runs like its a cobalt raq unit from 1990 HORRIBLE connections dropped ftps and all my customers complain.....
    Chirpy yer sposed to be the cpanel god man ~ what gives why do I see in thread after thread you say we shouldnt open these but it wont work any other way ~
    Lettuce get to the beef of this at last please can you enlighten me please. :cool:
     
    #8 procam, Dec 6, 2005
  9. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,460
    Likes Received:
    22
    Trophy Points:
    463
    Location:
    Go on, have a guess
    I have never had to open a hole in the APF firewall for passive FTP. IF you are having to, you may be blocking static ports that you shouldn't be (i.e. 20 and 21). Also, do make sure you're using the latest APF as recent ones have been very buggy and I have had problems on some servers with the very latest release too. In those cases I've used a different SPI firewall script also without a hole in it.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #9 chirpy, Dec 7, 2005
  10. Vatoloco

    Vatoloco Well-Known Member

    Joined:
    Jun 21, 2004
    Messages:
    99
    Likes Received:
    0
    Trophy Points:
    166
    What issues could arise from blocking 21? I changed the default port for ProFTP awhile ago and when I setup APF I went through /etc/apf/conf.apf and removed all instances of 21 and replaced it with my custom port. I also had to unblock 35000_36000.
     
    #10 Vatoloco, Mar 28, 2006
(You must log in or sign up to post here.)
Loading...
Similar Threads - ProFTPD Passive Configuration
  1. stefanbc

    FTP password not saving in /etc/proftpd

    stefanbc, Sep 15, 2017, in forum: General Discussion
    Replies:
    5
    Views:
    599
    cPanelMichael
    Sep 19, 2017
  2. batesy87

    SOLVED [CPANEL-22169] Pure-FTPd: Preserve disabled ForcePassiveIP when NAT is active

    batesy87, Sep 12, 2018, in forum: General Discussion
    Replies:
    4
    Views:
    295
    cPanelMichael
    Nov 2, 2018
  3. Henry Aspden

    SOLVED PureFTP Resets Passive Ports & IP Address

    Henry Aspden, Dec 18, 2017, in forum: General Discussion
    Replies:
    2
    Views:
    1,197
    Henry Aspden
    Dec 18, 2017
  4. Nazir Siddique

    Passive Port Range Setting?

    Nazir Siddique, Oct 26, 2017, in forum: Security
    Replies:
    2
    Views:
    944
    cPanelMichael
    Oct 26, 2017
  5. diWhile1

    Pure-FTPd servers ForcePassiveIP issue

    diWhile1, Oct 24, 2017, in forum: General Discussion
    Replies:
    8
    Views:
    923
    cPanelMichael
    Nov 8, 2017

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice