Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have ubuntu 12.04 lts server with vsftpd-ext installed (for allow-writable-chroot). it has been working solid, even with ftps support(I have my manually signed certificate for this).

until now I have been accessing this server from windows only, using total commander's built-in ftp/ftps client. problem is, I can't access them from linux, no matter what client I use.

here are result of my attempts:

filezilla :

Status: Resolving address of myserver.com
Status: Connecting to myip:21...
Status: Connection established, waiting for welcome message...
Response:   220 (vsFTPd 2.3.5)
Command:    AUTH TLS
Response:   234 Proceed with negotiation.
Status: Initializing TLS...
Error:  GnuTLS error -12: A TLS fatal alert has been received.
Error:  Could not connect to server
Status: Waiting to retry...

gftp :

Looking up myserver.com
Trying myserver.com
Connected to myserver.com
220 (vsFTPd 2.3.5)
AUTH TLS
234 Proceed with negotiation.
SSL connection established using TLSv1/SSLv3 (DES-CBC3-SHA)
PBSZ 0
200 PBSZ set to 0.
PROT P
200 PROT now Private.
USER xxxx
331 Please specify the password.
PASS xxxx
230 Login successful.
SYST
215 UNIX Type: L8
TYPE I
200 Switching to Binary mode.
PWD    Looking up myserver.com
Trying myserver.com
Connected to myserver.com
220 (vsFTPd 2.3.5)
AUTH TLS
234 Proceed with negotiation.
SSL connection established using TLSv1/SSLv3 (DES-CBC3-SHA)
PBSZ 0
200 PBSZ set to 0.
PROT P
200 PROT now Private.
USER xxxx
331 Please specify the password.
PASS xxxx
230 Login successful.
SYST
215 UNIX Type: L8
TYPE I
200 Switching to Binary mode.
PWD
257 "/"
Loading directory listing / from server (LC_TIME=en_US.utf8)
PASV
227 Entering Passive Mode (ip,200,107).
LIST
150 Here comes the directory listing.
257 "/"
Loading directory listing / from server (LC_TIME=en_US.utf8)
PASV
227 Entering Passive Mode (ip,200,107).
LIST
150 Here comes the directory listing.
(hangs at this point)

fireftp:

220 (vsFTPd 2.3.5)
       AUTH TLS
234 Proceed with negotiation.
       PBSZ 0
200 PBSZ set to 0.
       USER xxxx
331 Please specify the password.
       PASS (password not shown)
230 Login successful.
       FEAT
211-Features:
AUTH TLS
EPRT
EPSV
MDTM
PASV
PBSZ
PROT
REST STREAM
SIZE
TVFS
UTF8
211 End
       OPTS UTF8 ON
200 Always in UTF8 mode.
       PWD
257 "/"
       TYPE A
200 Switching to ASCII mode.
       PROT P
200 PROT now Private.
       PASV
227 Entering Passive Mode (ip,193,37).
       LIST
150 Here comes the directory listing.
(hangs at this point)

I tried various encodings with fireftp, with no luck. funny thing is this server is still accessible with total commander client.

here is my vsftpd config file(comments removed):

listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
#anon_upload_enable=YES
#anon_mkdir_write_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=NO
chroot_local_user=YES
allow_writeable_chroot=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd

ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
rsa_cert_file=/etc/vsftpd/vsftpd.pem
rsa_private_key_file=/etc/vsftpd/vsftpd.pem
share|improve this question

1 Answer 1

If your iptables firewall is on, then you need to load the connection tracking module

modprobe nf_conntrack_ftp
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.