0

I have ubuntu 12.04 lts server with vsftpd-ext installed (for allow-writable-chroot). it has been working solid, even with ftps support(I have my manually signed certificate for this).

until now I have been accessing this server from windows only, using total commander's built-in ftp/ftps client. problem is, I can't access them from linux, no matter what client I use.

here are result of my attempts:

filezilla :

Status: Resolving address of myserver.com
Status: Connecting to myip:21...
Status: Connection established, waiting for welcome message...
Response:   220 (vsFTPd 2.3.5)
Command:    AUTH TLS
Response:   234 Proceed with negotiation.
Status: Initializing TLS...
Error:  GnuTLS error -12: A TLS fatal alert has been received.
Error:  Could not connect to server
Status: Waiting to retry...

gftp :

Looking up myserver.com
Trying myserver.com
Connected to myserver.com
220 (vsFTPd 2.3.5)
AUTH TLS
234 Proceed with negotiation.
SSL connection established using TLSv1/SSLv3 (DES-CBC3-SHA)
PBSZ 0
200 PBSZ set to 0.
PROT P
200 PROT now Private.
USER xxxx
331 Please specify the password.
PASS xxxx
230 Login successful.
SYST
215 UNIX Type: L8
TYPE I
200 Switching to Binary mode.
PWD    Looking up myserver.com
Trying myserver.com
Connected to myserver.com
220 (vsFTPd 2.3.5)
AUTH TLS
234 Proceed with negotiation.
SSL connection established using TLSv1/SSLv3 (DES-CBC3-SHA)
PBSZ 0
200 PBSZ set to 0.
PROT P
200 PROT now Private.
USER xxxx
331 Please specify the password.
PASS xxxx
230 Login successful.
SYST
215 UNIX Type: L8
TYPE I
200 Switching to Binary mode.
PWD
257 "/"
Loading directory listing / from server (LC_TIME=en_US.utf8)
PASV
227 Entering Passive Mode (ip,200,107).
LIST
150 Here comes the directory listing.
257 "/"
Loading directory listing / from server (LC_TIME=en_US.utf8)
PASV
227 Entering Passive Mode (ip,200,107).
LIST
150 Here comes the directory listing.
(hangs at this point)

fireftp:

220 (vsFTPd 2.3.5)
       AUTH TLS
234 Proceed with negotiation.
       PBSZ 0
200 PBSZ set to 0.
       USER xxxx
331 Please specify the password.
       PASS (password not shown)
230 Login successful.
       FEAT
211-Features:
AUTH TLS
EPRT
EPSV
MDTM
PASV
PBSZ
PROT
REST STREAM
SIZE
TVFS
UTF8
211 End
       OPTS UTF8 ON
200 Always in UTF8 mode.
       PWD
257 "/"
       TYPE A
200 Switching to ASCII mode.
       PROT P
200 PROT now Private.
       PASV
227 Entering Passive Mode (ip,193,37).
       LIST
150 Here comes the directory listing.
(hangs at this point)

I tried various encodings with fireftp, with no luck. funny thing is this server is still accessible with total commander client.

here is my vsftpd config file(comments removed):

listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
#anon_upload_enable=YES
#anon_mkdir_write_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=NO
chroot_local_user=YES
allow_writeable_chroot=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd

ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
rsa_cert_file=/etc/vsftpd/vsftpd.pem
rsa_private_key_file=/etc/vsftpd/vsftpd.pem

1 Answer 1

0

If your iptables firewall is on, then you need to load the connection tracking module

modprobe nf_conntrack_ftp
1
  • Rather to late, but try toggling passive mode.
    – davidgo
    Mar 27, 2020 at 9:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .