Tag Info

Hot answers tagged

5

Enable VerboseLog yes in your pureftpd.conf. This logs all actions. Alternatively you can use the -d or --verboselog commandline options at the startup of pureftpd. Where these logs go depends on your distribution. This is often /var/log/messages or a separate pureftpd.log.


5

You could temporarily replace that file with a much larger file, or a FIFO (see mkfifo command) and then look for that process again.


5

You need to tell your client to transfer in binary mode.


4

My guess is that your FTP server is behind a NAT firewall, and that you've got the ip_conntrack_ftp helper module (or equivalent) running on the firewall device. Basically, this module scans the data stream looking for instances of the internal IP address, and rewrites them to the external IP address. It can't do this for TLS-secured FTP connections, ...


3

Pure-ftpd does not natively support blocking specific file types. However, you can accomplish this by running a script after the upload to delete the undesired file types. You would use the pure-uploadscript program to accomplish this. An example can be found here: http://www.webhostingtalk.com/showpost.php?p=6277573&postcount=4 (You will probably ...


3

Mutt is probably looking at the wrong place for the sendmail command. :set sendmail from within mutt gives you the location where mutt is looking for it. It can also be used for setting the right location e.g. :set sendmail="/usr/sbin/sendmail" As a side note, mutt is a great program, but nail or mailx are usually the tools of choice for use in a script.


3

Here is the website describing your log format. It has a good description of what every field in your log file means.


3

You can use -f option of strace for tracing child processes. Get pid of suspicious process, then execute strace -f -p pid -o /tmp/strace.log. You should search "connect" or "RETR" keyword.


3

No, you cannot do that using iptables only. Fail2ban will do exactly what you want, possibly (it's configurable) through iptables. By itself, however, iptables is only a firewall, stateful if you want it to be but still nothing more than a firewall. You can set up rate limiting rules for new connections, but that's about as close as you can get without a ...


2

Starting the process with a different umask (-U) flag set will solve the permissions issue. For example: /usr/sbin/pure-ftpd -U 113:002 & Note that each umask number is subtracted from 7 to get the final permissions: 113:002 results in 664 for files and 775 for directories.


2

When use want a complete removing of a package you need to purge it (usaualy it means removing also config files). aptitude purge pure-ftpd-mysql Anyway, when a config file for an installed package is missing, you can use the following command to force dpkg to reinstall original missing configuration files : dpkg --force-confmiss -i ...


2

Try this: echo "10000 11000" > /etc/pure-ftpd/conf/PassivePortRange I found this by reading the manpage for pure-ftpd-wrapper: pure-ftpd-wrapper reads the configuration for the Pure-FTPd daemon from files in the directory /etc/pure-ftpd/conf. Each file in this directory is related to a command line option. ... Two numbers ...


2

drw-rw-r-- some_website_backups As you can see, the leaf directory does not have execute permissions - for anybody.


2

From the pure-FTPd FAQ How do I give access to the 'pure-ftpwho' command to non-root users? The 'pure-ftpwho' command is restricted to root by default, because users probably shouldn't be given the ability to spy what other users are doing on the same host. However, it's safe to put the setuid bit on that command, in order to have it work as ...


2

A number of SELinux policies are flagged dontaudit so that they do not leave messages in the audit log. This is usually because they are policies that would just spam the log with useless entries, but sometimes developers dontaudit a denial rather than fixing the underlying problem. The policy you're hitting is almost certainly among these, since you aren't ...


2

I'm using pure-ftpd 1.0.35 Ubuntu 12.04.3 LTS. Don't work echo 'yes' > /etc/pure-ftpd/conf/DontResolve The parameter 'DontResolve' changes '/var/log/syslog' but it don't change '/var/log/auth.log'. So for Fail2ban # nano jail.local [pure-ftpd] enabled = true port = ftp,ftp-data,ftps,ftps-data filter = pure-ftpd #logpath = /var/log/auth.log ...


2

Strictly to your question: 1) yes 2) have a look at the log files for those services under /var/log . The second part of the question depends on what you will find in the log files and trace the cause of this behaviour. 3) you can use monit -> http://mmonit.com/monit/ From the website: Monit can act if an error situation should occur, e.g.; if ...


2

pure-ftpd-mysql supports sha512 crypt with salt. It's as easy as: MYSQLCrypt crypt And do make sure that your Password column is long enough. For crypt $6$ it's 106 characters. So the table structure working with your query might be like this: CREATE TABLE ftpd ( User varchar(16) NOT NULL default '', status enum('0','1') NOT NULL default '0', ...


1

If you use PureDB users, you could use the -d homedirectory option to chroot user to his home directory on account : pure-pw useradd myuser -u ftpuser -g ftpgroup -d /home/ftp/myuser To provide access to specific folders (often seen for webservers), use symlinks. www -> /srv/www/myuser [UPDATE] Misread the post about jailing user. You could either ...


1

Looks like the process is still running. Try killing it: kill 11359 or pkill pure-ftpd


1

In active mode the server initiates a connection to a client defined ip address, so the server has no way of affecting the port number being used. In this case you don't need to open other incoming ports than 21 because the server initiates the data connection towards the client. In passive mode the client opens a connection to a server defined port, and ...


1

In passive mode the server tells the client to connect back on a random port. You have configured the server to use a specific range so it should only use these. This range will need to be opened though your firewall to allow connections in. (Unless your firewall is clever enough to look in the FTP packets and add dynamic rules). In active mode the client ...


1

You need to give a -u uid and -g gid. pure-pw useradd test-user -u 1234 -g 1234 -d /path/to/my/dir Obviously use your own numbers...


1

You need to enable the epel repository before you can install it rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-7.noarch.rpm Then your yum command will work.


1

Yes but you must configure epel repo first. There is no pure-ftpd in basics centos repo. Here is link to rpm http://ftp.ps.pl/pub/Linux/fedora-epel/6/i386/epel-release-6-7.noarch.rpm Download it using wget http://ftp.ps.pl/pub/Linux/fedora-epel/6/i386/epel-release-6-7.noarch.rpm next install with rpm -ivh ...


1

Have you looked at Posix ACLs?


1

FTP in passive mode involves the client making a second data connection to the server on a port number indicated in the control connection on port 21. The conntrack module sniffs the control connection and detects the port number of the data connection, and then treats the incoming data connection as RELATED, which would usually be accepted by this rule: -A ...


1

For the records. The problem was that pureftpd have a "MinUID" variable and it doesn't allow an user of UID < 100 to log in.


1

The AS400 shop altered their script, and that fixed the problem. They are not aware of anything that changed that would have caused the problem. Thanks commenters!


1

I doubt the MySQL-server package you have installed from some third party (maybe mysql.com) would remove the databases on package removal but you can always see what scripts are run pre/post install in an RPM rpm --query --scripts MySQL-server should show all the scripts associated with the package and you can read through them to see what is automated. ...



Only top voted, non community-wiki answers of a minimum length are eligible