up vote 0 down vote favorite
share [g+] share [fb]

Basically upload / download is somewhat blocked by 550

After much googling, i have done the following

  1. chmod 777 -R /home/ftpRepo
  2. open up the ports (20,21, passive, and more)
  3. write enabled

And it gets weirder...

  • I can upload files
  • I cannot download / rename / edit files
  • I cannot create directory

And : ftpRepo is not the actual user

iptables dump

iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:www
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:300
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:301
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:1023:1050
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:ftp-data:ftp
ACCEPT     tcp  --  anywhere             202.54.1.20         tcp spts:1024:65535 dpt:ftp state NEW,ESTABLISHED
ACCEPT     tcp  --  anywhere             202.54.1.20         tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             202.54.1.20         tcp spts:1024:65535 dpt:ftp-data state ESTABLISHED

Chain FORWARD (policy DROP)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  202.54.1.20          anywhere            tcp spt:ftp dpts:1024:65535 state ESTABLISHED
ACCEPT     tcp  --  202.54.1.20          anywhere            tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED
ACCEPT     tcp  --  202.54.1.20          anywhere            tcp spt:ftp-data dpts:1024:65535 state RELATED,ESTABLISHED

The following is the shorten config file

listen=YES
anonymous_enable=NO
user_sub_token=$USER
guest_enable=YES
guest_username=ftpRepo
pasv_min_port=1023
pasv_max_port=1050
local_enable=YES
write_enable=YES
anon_upload_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/private/vsftpd.pem
link|improve this question
1  
You should not use chmod 777 -R ..... – Mircea Vutcovici Dec 23 '11 at 6:49
1  
Enable debugging in the FTP client and see what is happening and what errors are logged in the client. – Mircea Vutcovici Dec 23 '11 at 6:51
@MirceaVutcovici : yup i shouldnt... but it certainly removes the chance of permission error (as i hunt this pesky bug) – pico.creator Dec 24 '11 at 10:59
1  
You can enable debugging in on the server too. Can you display the full error from the client? RFC959 says "550 Requested action not taken. File unavailable (e.g., file not found, no access)." – Mircea Vutcovici Dec 24 '11 at 18:01
1  
Do you have apparmor or selinux? – Mircea Vutcovici Dec 24 '11 at 18:02
show 2 more comments
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.