Skip to main content
Share Your Experience: Take the 2024 Developer Survey
14 votes

Vsftpd passive reply with 0,0,0,0 address even with correct pasv_address

It looks like a bug in vsftpd to me. From the code, it looks like, vsftpd always sends the 0,0,0,0, if the public pasv_address is set, and the server has a (local) IPv6 address. To fix this, make sure ...
Martin Prikryl's user avatar
11 votes

vsftp: why is allow_writeable_chroot=YES a bad idea?

If the FTP credentials of a user (even a virtual user) with a writeable chroot get compromised, the attacker might conceivably be able to perform a ROARING BEAST ATTACK. To summarise my rough ...
Mark Amery's user avatar
7 votes
Accepted

CentOS 7 - Directories created through VSFTPD not inheriting SELinux contexts

There is a difference between default labelling that occurs at runtime and the regular expression based post-labelling policy that applies on the server. What you are noting here: /var/www/html(/.*)?...
Matthew Ife's user avatar
  • 23.6k
7 votes
Accepted

Boolean ftp_home_dir is not defined - RHEL7.3

Red Hat's Official Response: On further investigation, I have found that mentioned booblean was removed on RHEL 7.3. We have already filed a bugzilla for the same, BZ:1406542 https://...
Mr.J's user avatar
  • 123
6 votes

How to configure vsftpd to work with passive mode

I had to do the following steps to get vsftp passive mode working on CentOS 8: Enable passive mode in vsftpd config /etc/vsftpd/vsftpd.config: pasv_enable=Yes pasv_min_port=50000 pasv_max_port=50999 ...
h18c's user avatar
  • 121
6 votes

Set ownership on uploaded files

Change group of all files/directories recursively to www-data group chgrp -R www-data /folder/ Give write permissions to the group recursively chmod -R g+w /folder/ Add the desired ftp users to the ...
Vikelidis Kostas's user avatar
5 votes

vsftpd error: 500 OOPS: vsf_sysutil_bind

I was having trouble with this issue for the past few days, at first I followed the route of the one answer of installing proftpd. That did not pan out as I'd hoped so I tried pure-ftpd, failing that ...
Wouter's user avatar
  • 51
4 votes

How to enable TLS 1.1 **minimum** on vsftpd

Answer isn't posted, so I thought I'd follow up for the rest... To disable TLSv1.0 and enable TLSv1.1 and TLSv1.2 just add these two lines and change the third: ssl_tlsv1_2=YES ssl_tlsv1_1=YES ...
Rhino's user avatar
  • 41
4 votes
Accepted

vsftpd local users error "Incorrect login"

1.) Add User with: (This won't change anything in Ubuntu but just in case.) sudo deluser ftpuser1 sudo adduser ftpuser1 sudo nano /etc/passwd - Change the path if needed 2.) In vsftpd.conf ...
gdarko's user avatar
  • 156
4 votes
Accepted

What SFTP server implementations support check-file extension

Few servers that I know to support check-file SFTP extension are: ProFTPD mod_sftp – open source Vandyke VShell – commercial Bitvise SSH Server – commercial - free for non-commercial personal use ...
Martin Prikryl's user avatar
4 votes

vsftpd ssl (tls) fatal: protocol version

I had this exact same problem and figured it out. The SSL error isn't the actual problem. What's happening is that the server has some kind of problem with the environment/config for the user but it's ...
Sean P.'s user avatar
  • 81
4 votes
Accepted

VSFTPD: set a user's default directory to NOT their chroot directory

There is only one way to do this with vsftpd and paths must be set in the system passwd file. Paths cannot be set in the vsftpd.conf file. In the /etc/vsftpd.conf file, set the following two options: ...
deeess's user avatar
  • 81
4 votes
Accepted

How to add username or change password in vsftpd in Ubuntu 16.04?

By default vsftpd users are the ones of the system. So if you have admin access, root user or a sudoer, you can log in, view the users using getent passwd command and passwd SomeUser as root to change ...
Krackout's user avatar
  • 1,585
3 votes
Accepted

How to disable systemcalls in ftp environment with vsftpd?

Commands that start with an exclamation mark ! escape the FTP client and are executed locally with the rights of your local user. The don't run on the server, actually they won't even reach the ...
HBruijn's user avatar
  • 80.7k
3 votes

VSFTPD specific ciphers

Recently, I found out, it is entirely possible to define custom ciphers; take this example: ## Select which SSL ciphers `vsftpd` will allow for encrypted SSL connections (required by FileZilla). ...
Vlastimil Burián's user avatar
3 votes

530 Permission Denied when trying to log onto FTP

I had the same problem and i solved by removing userlist_deny=NO in the user_list.conf file and add the same line in vsftpd.conf file, then restart the service with service vsftpd restart. I had ...
Dmarin's user avatar
  • 31
3 votes

Why is the chroot_local_user of vsftpd insecure?

When chroot’ed to /some/dir/, the filesystem becomes effectively confined to that directory. Thus, any program attempting to open/etc/some_file effectively opens /some/dir/etc/some_file. When /some/...
Laurent CAPRANI's user avatar
3 votes

How to enable TLS 1.1 **minimum** on vsftpd

It seems the current official version 3.0.3 actually works fine without the RHEL patch as it seems you do can limit connection to TLSv1.2. As @Chris Kennedy write, you can set the following option in ...
MrCalvin's user avatar
  • 403
3 votes

Passive mode issue with vsftpd on Ubuntu (EC2)

In your specific case, I see that you have an error 550 which makes me think there is a file permission problem. In general, the most common cause for PASV mode to fail when vsftpd is running on EC2 ...
Luca Gibelli's user avatar
  • 2,791
3 votes

Vsftpd passive reply with 0,0,0,0 address even with correct pasv_address

I had this problem with a server hosted on Aliyun. I solved it by disabling listen_ipv6 and enabling listen in the config. listen_ipv6=NO listen=YES I also specified my external IP using ...
Chris's user avatar
  • 131
3 votes

how can I hide my system folders?

set chroot_local_user=YES Read the docs, be educated
user9517's user avatar
  • 116k
3 votes

couldn't setup sftp in ec2

OK, to answer this, something needs to be clarified: vsftpd implements the FTP protocol. sftp does not implement the FTP protocol. In spite of having "ftp" in its name, has very little to do with FTP, ...
EEAA's user avatar
  • 110k
3 votes
Accepted

FTP PAM Setup for VSFTPD

After reading a few articles I kinda understad how PAM works. The files in /etc/pam.d are basically list of conditions that are checked when that module/service is being used. So when I set the ...
echo_salik's user avatar
3 votes
Accepted

PASV FTP fails for wget/ftp but works for curl/lftp

... the firewall is allowing all the necessary ports. This suggests that the server and client are not in the same network. I guess that the server is in some internal network and that the client is ...
Steffen Ullrich's user avatar
3 votes

SFTP error "Received unexpected end-of-file from SFTP server" on CentOS 6

I believe you should add the Subsystem sftp internal-sftp to /etc/ssh/sshd_config (and not to /etc/ssh/ssh_config)
gilodo's user avatar
  • 131
2 votes

"500 OOPS: vsftpd: refusing to run with writable root inside chroot()" - login failed on Debian

Just add seccomp_sandbox=NO to the configuration and restart the service with service vsftpd restart Then "allow_writeable_chroot=YES" will work also with newer vsFTPd versions (found in 500 OOPS: ...
Paul Neuwirth's user avatar
2 votes

500 OOPS: SSL: cannot load RSA private key vsftpd

Unfortunately the error message is somewhat generic and there could be several different root causes. On some systems (eg, RHEL 8.8), the length of the key should be not 1024 but at least 2048. In my ...
user581735's user avatar
2 votes

How to hide Folders for FTP user jailed to user home

I had exactly same question. In my case, chroot_local_user=YES didn't work well. If enable it, the below error message was returned when I tryed to login: 500 OOPS: vsftpd: refusing to run with ...
Anselmo Park's user avatar
2 votes

vsftpd LIST causes GnuTLS error -15

I had the same issue as you have and after a long time of searching the internet, I seem to have found a workaround here: Add the line seccomp_sandbox=NO to your /etc/vsftpd.conf. My use case is a ...
suluke's user avatar
  • 123

Only top scored, non community-wiki answers of a minimum length are eligible