  | | | Subject: FTP: connection refused | Subject: FTP: connection refused 2003-11-14 - By George Gallen
Back in my /etc/xinet.d, it's setup as wu-ftpd
and looks like:
# default: on # description: The wu-ftpd FTP server serves FTP connections. It uses \ # normal, unencrypted usernames and passwords for authentication. service ftp { disable = no socket_type = stream wait = no user = root server = /usr/sbin/in.ftpd server_args = -l -a log_on_success += DURATION USERID log_on_failure += USERID nice = 10 }
>-- --Original Message-- -- >From: Keith Mastin [mailto:kmastin@(protected)] >Sent: Friday, November 14, 2003 11:05 AM >To: enigma-list@(protected) >Subject: Re: FTP: connection refused > > > >> Hi all, I have a tough problem that hopefully has a not so tough >> solution. I'm trying to setup a simple ftp server on Red >Hat 7.2 and I >> can't get beyond "connection" refused when trying to connect >externally. >> I've read every FAQ and online guide I can and I can't >figure out why. >> >> The big clue I think is that netstat -a says that ftp is not being >> listened on. /etc/services looks ok to me (ftp is on port >21 for both >> UDP and TCP), I added the ftp service in /etc/xinet.d/ftp >and restarted >> xinetd, so I'm not sure what could be inhibiting ftpd. >Here's my config >> from /etc/xinet.d/ftp: > >Why do you need udp? > >> service ftp { >> disable = no >> socket_type = stream >> wait = no >> nice = 10 >> user = root >> server = /usr/sbin/in.ftpd >> server_args = -l >> instances = 4 >> log_on_sucess += DURATION HOST USERID >> } >> >> I modified /etc/hosts.allow and /etc/hosts.deny too. I wasn't sure >> about hosts.allow so I copied the working nfs stuff to a new line and >> changed it: >> in.ftpd: 10.0.0.0/255.255.255.224 >> which is just like the entries for mountd, statd, etc. >> >> Not sure what else to say. Here's the long story summarized: >> 1. Dowloaded wu-ftp and built it with ./configure and make > >Try vsftpd (very secure ftp)... less likely to get hacked or fubar'ed, >comes in an rpm (you're running a redhat machine, right?) and it's a >breeze to set up. Installing from sources on a redhat machine can be a >turkey shoot as redhat regularily decides that files belong >where redhat >thinks they should go, not where the standards dictate. This >in #2 on my >personal list of beefs with redhat. > >If you insist on using wu-ftpd, then at least rebuild it from >the source rpm. > >> 2. Created /usr/ftp and the little jail for it to run in. >> 3. Check the firewall to make sure it didn't reject ftp. > >Which port, 20 or 21? Try opening both 20 and 21. > >> 4. Made changed to /etc/xinetd.d/ftp above and hosts files. >> 5. Restarted xinetd >> There maybe a few other things I did, this is what I recall for now. > >Go to .bash_history to check your work. You can also log all shell >activity to a different file, but /bash_history should be >sufficient for >most cases. > >> I did a tcpdump trace of the connect attempt, the packets >are reaching >> the server and it replies, but the replies are all R >(resets). I think >> this is related to the fact that xinetd doesn't think it has >something >> to run on port 21 (ftp port). > >Can you connect in with telnet localhost 21? >Does netstat -tuan show port 21 listening? > >-- >Keith Mastin >BeechTree Information Technology Services Inc. >Toronto, Canada >(416)429 9304 > > >__ ____ ____ ____ ____ ____ ____ ____ ____ ____ >enigma-list mailing list >enigma-list@(protected) >https://www.redhat.com/mailman/listinfo/enigma-list >
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859 (See http://iso-8859.ora-code.com)-1"> <META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35"> <TITLE>RE: FTP: connection refused</TITLE> </HEAD> <BODY>
<P><FONT SIZE=2>in my /etc/xinet.d, it's setup as wu-ftpd</FONT> </P>
<P><FONT SIZE=2>and looks like:</FONT> </P>
<P><FONT SIZE=2># default: on</FONT> <BR><FONT SIZE=2># description: The wu-ftpd FTP server serves FTP connections. It uses \</FONT> <BR><FONT SIZE=2># normal, unencrypted usernames and passwords for authentication.</FONT> <BR><FONT SIZE=2>service ftp</FONT> <BR><FONT SIZE=2>{</FONT> <BR><FONT SIZE=2> disable = no</FONT> <BR><FONT SIZE=2> socket_type = stream< /FONT> <BR><FONT SIZE=2> wait = no</FONT> <BR><FONT SIZE=2> user = root</FONT> <BR><FONT SIZE=2> server = /usr/sbin/in.ftpd</FONT> <BR><FONT SIZE=2> server_args = -l -a</FONT > <BR><FONT SIZE=2> log_on_success  ; += DURATION USERID</FONT> <BR><FONT SIZE=2> log_on_failure  ; += USERID</FONT> <BR><FONT SIZE=2> nice = 10</FONT> <BR><FONT SIZE=2>}</FONT> </P> <BR> <BR>
<P><FONT SIZE=2>>-- --Original Message-- --</FONT> <BR><FONT SIZE=2>>From: Keith Mastin [<A HREF="mailto:kmastin@(protected)" >mailto:kmastin@(protected)</A>]</FONT> <BR><FONT SIZE=2>>Sent: Friday, November 14, 2003 11:05 AM</FONT> <BR><FONT SIZE=2>>To: enigma-list@(protected)</FONT> <BR><FONT SIZE=2>>Subject: Re: FTP: connection refused</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>> Hi all, I have a tough problem that hopefully has a not so tough</FONT> <BR><FONT SIZE=2>>> solution. I'm trying to setup a simple ftp server on Red </FONT> <BR><FONT SIZE=2>>Hat 7.2 and I</FONT> <BR><FONT SIZE=2>>> can't get beyond "connection" refused when trying to connect </FONT> <BR><FONT SIZE=2>>externally.</FONT> <BR><FONT SIZE=2>>> I've read every FAQ and online guide I can and I can't </FONT> <BR><FONT SIZE=2>>figure out why.</FONT> <BR><FONT SIZE=2>>></FONT> <BR><FONT SIZE=2>>> The big clue I think is that netstat -a says that ftp is not being</FONT> <BR><FONT SIZE=2>>> listened on. /etc/services looks ok to me (ftp is on port </FONT> <BR><FONT SIZE=2>>21 for both</FONT> <BR><FONT SIZE=2>>> UDP and TCP), I added the ftp service in /etc/xinet.d /ftp </FONT> <BR><FONT SIZE=2>>and restarted</FONT> <BR><FONT SIZE=2>>> xinetd, so I'm not sure what could be inhibiting ftpd . </FONT> <BR><FONT SIZE=2>>Here's my config</FONT> <BR><FONT SIZE=2>>> from /etc/xinet.d/ftp:</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>Why do you need udp?</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>> service ftp {</FONT> <BR><FONT SIZE=2>>> disable = no</FONT> <BR><FONT SIZE=2>>> socket_type = stream</FONT> <BR><FONT SIZE=2>>> wait = no</FONT> <BR><FONT SIZE=2>>> nice = 10</FONT> <BR><FONT SIZE=2>>> user = root</FONT> <BR><FONT SIZE=2>>> server = /usr/sbin/in.ftpd</FONT> <BR><FONT SIZE=2>>> server_args = -l</FONT> <BR><FONT SIZE=2>>> instances = 4</FONT> <BR><FONT SIZE=2>>> log_on_sucess += DURATION HOST USERID</FONT> <BR><FONT SIZE=2>>> }</FONT> <BR><FONT SIZE=2>>></FONT> <BR><FONT SIZE=2>>> I modified /etc/hosts.allow and /etc/hosts.deny too. I wasn't sure</FONT> <BR><FONT SIZE=2>>> about hosts.allow so I copied the working nfs stuff to a new line and</FONT> <BR><FONT SIZE=2>>> changed it:</FONT> <BR><FONT SIZE=2>>> in.ftpd: 10.0.0.0/255.255.255.224</FONT> <BR><FONT SIZE=2>>> which is just like the entries for mountd, statd, etc .</FONT> <BR><FONT SIZE=2>>></FONT> <BR><FONT SIZE=2>>> Not sure what else to say. Here's the long story summarized:</FONT> <BR><FONT SIZE=2>>> 1. Dowloaded wu-ftp and built it with ./configure and make</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>Try vsftpd (very secure ftp)... less likely to get hacked or fubar'ed,</FONT> <BR><FONT SIZE=2>>comes in an rpm (you're running a redhat machine, right?) and it's a</FONT> <BR><FONT SIZE=2>>breeze to set up. Installing from sources on a redhat machine can be a</FONT> <BR><FONT SIZE=2>>turkey shoot as redhat regularily decides that files belong </FONT> <BR><FONT SIZE=2>>where redhat</FONT> <BR><FONT SIZE=2>>thinks they should go, not where the standards dictate. This </FONT> <BR><FONT SIZE=2>>in #2 on my</FONT> <BR><FONT SIZE=2>>personal list of beefs with redhat.</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>If you insist on using wu-ftpd, then at least rebuild it from </FONT> <BR><FONT SIZE=2>>the source rpm.</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>> 2. Created /usr/ftp and the little jail for it to run in.</FONT> <BR><FONT SIZE=2>>> 3. Check the firewall to make sure it didn't reject ftp.</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>Which port, 20 or 21? Try opening both 20 and 21.</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>> 4. Made changed to /etc/xinetd.d/ftp above and hosts files.</FONT> <BR><FONT SIZE=2>>> 5. Restarted xinetd</FONT> <BR><FONT SIZE=2>>> There maybe a few other things I did, this is what I recall for now.</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>Go to .bash_history to check your work. You can also log all shell</FONT> <BR><FONT SIZE=2>>activity to a different file, but /bash_history should be </FONT> <BR><FONT SIZE=2>>sufficient for</FONT> <BR><FONT SIZE=2>>most cases.</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>> I did a tcpdump trace of the connect attempt, the packets </FONT> <BR><FONT SIZE=2>>are reaching</FONT> <BR><FONT SIZE=2>>> the server and it replies, but the replies are all R </FONT> <BR><FONT SIZE=2>>(resets). I think</FONT> <BR><FONT SIZE=2>>> this is related to the fact that xinetd doesn't think it has </FONT> <BR><FONT SIZE=2>>something</FONT> <BR><FONT SIZE=2>>> to run on port 21 (ftp port).</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>Can you connect in with telnet localhost 21?</FONT> <BR><FONT SIZE=2>>Does netstat -tuan show port 21 listening?</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>-- </FONT> <BR><FONT SIZE=2>>Keith Mastin</FONT> <BR><FONT SIZE=2>>BeechTree Information Technology Services Inc.</FONT> <BR><FONT SIZE=2>>Toronto, Canada</FONT> <BR><FONT SIZE=2>>(416)429 9304</FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>></FONT> <BR><FONT SIZE=2>>__ ____ ____ ____ ____ ____ ____ ____ ____ ____</FONT> <BR><FONT SIZE=2>>enigma-list mailing list</FONT> <BR><FONT SIZE=2>>enigma-list@(protected)</FONT> <BR><FONT SIZE=2>><A HREF="https://www.redhat.com/mailman/listinfo/enigma -list" TARGET="_blank">https://www.redhat.com/mailman/listinfo/enigma-list</A>< /FONT> <BR><FONT SIZE=2>></FONT> </P>
</BODY> </HTML>
|
|
 |