PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : vsftpd



shadow010
18.01.09, 16:52
Hallo

Ich habe nun einen vsftpd Server aufgesetzt aber wenn ich ihn von einem Windows-Client per Ausführen ftp 192.168.1.2 aufrufe kommt in der Konsole immer nur
> ftp: connect :Verbindung wegen Zeitüberschreitung abgebrochen
ftp>

weiss jemand an was das liegen könnte?

Besten dank

marce
18.01.09, 16:54
Serverkonfguration, Firewall, lokale Einstellungen am Client, Netzwerkprobleme, ...

stefan.becker
18.01.09, 16:54
An Feuerwänden?

Ansonsten können konkrete Infos nie schaden ...

shadow010
18.01.09, 17:01
Hallo

Am Firewall eher nicht denn ich habe jetzt alle Ports zum Test aufgemacht. Clients habe ich noch keine hinzugefühgt aber den anonymen Modus freigeschaltet.... bin absolut Anfähnger auf dem Linux Systeme. Wie komme ich an konkretere Infos soll ich die /etc/vsftpd.conf posten?

marce
18.01.09, 17:03
es gibt sicherlich ein Logfile zum ftp-Server. Und die Konfig zu posten ist nie falsch.

Dabei bitte an die [code]-Tags denken, dann bleibt es auch lesbar.

Nicht schaden kann auch ein ftp 127.0.0.1 direkt vom Server aus, ein nmap von extern laufen lassen und die Ausgabe von ps -fe.

shadow010
18.01.09, 17:12
so das ist meine vsftpd.conf Datei die Log Datei suche ich auch gerade noch


# Example config file /etc/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# If you do not change anything here you will have a minimum setup for an
# anonymus FTP server.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.

# General Settings
#
# Uncomment this to enable any form of FTP write command.
#
#write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
#
dirmessage_enable=YES
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#
#nopriv_user=ftpsecure
#
# You may fully customise the login banner string:
#
#ftpd_banner="Welcome to FOOBAR FTP service."
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
# the presence of the "-R" option, so there is a strong case for enabling it.
#
#ls_recurse_enable=YES
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#
#deny_email_enable=YES
#
# (default follows)
#
#banned_email_file=/etc/vsftpd.banned_emails
#
# If enabled, all user and group information in
# directory listings will be displayed as "ftp".
#
#hide_ids=YES

# Local FTP user Settings
#
# Uncomment this to allow local users to log in.
#
local_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
#
#local_umask=022
#
# Uncomment to put local users in a chroot() jail in their home directory
# after login.
#
#chroot_local_user=YES
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
#
#chroot_list_enable=YES
#
# (default follows)
#
#chroot_list_file=/etc/vsftpd.chroot_list
#
# The maximum data transfer rate permitted, in bytes per second, for
# local authenticated users. The default is 0 (unlimited).
#
#local_max_rate=7200


# Anonymus FTP user Settings
#
# Allow anonymous FTP?
#
anonymous_enable=YES
#
# Anonymous users will only be allowed to download files which are
# world readable.
#
anon_world_readable_only=YES
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#
#anon_upload_enable=YES
#
# Default umask for anonymus users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
#
#anon_umask=022
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#
#anon_mkdir_write_enable=YES
#
# Uncomment this to enable anonymus FTP users to perform other write operations
# like deletion and renaming.
#
#anon_other_write_enable=YES
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using "root" for uploaded files is not
# recommended!
#
#chown_uploads=YES
#chown_username=whoever
#
# The maximum data transfer rate permitted, in bytes per second, for anonymous
# authenticated users. The default is 0 (unlimited).
#
#anon_max_rate=7200


# Log Settings
#
# Log to the syslog daemon instead of using an logfile.
#
syslog_enable=YES
#
# Uncomment this to log all FTP requests and responses.
#
#log_ftp_protocol=YES
#
# Activate logging of uploads/downloads.
#
#xferlog_enable=YES
#
# You may override where the log file goes if you like. The default is shown
# below.
#
#vsftpd_log_file=/var/log/vsftpd.log
#
# If you want, you can have your log file in standard ftpd xferlog format.
# Note: This disables the normal logging unless you enable dual_log_enable below.
#
#xferlog_std_format=YES
#
# You may override where the log file goes if you like. The default is shown
# below.
#
#xferlog_file=/var/log/xferlog
#
# Enable this to have booth logfiles. Standard xferlog and vsftpd's own style log.
#
#dual_log_enable=YES
#
# Uncomment this to enable session status information in the system process listing.
#
#setproctitle_enable=YES

# Transfer Settings
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
#
connect_from_port_20=YES
#
# You may change the default value for timing out an idle session.
#
#idle_session_timeout=600
#
# You may change the default value for timing out a data connection.
#
#data_connection_timeout=120
#
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
#
#async_abor_enable=YES
#
# By default the server will pretend to allow ASCII mode but in fact ignore
# the request. Turn on the below options to have the server actually do ASCII
# mangling on files when in ASCII mode.
# Beware that turning on ascii_download_enable enables malicious remote parties
# to consume your I/O resources, by issuing the command "SIZE /big/file" in
# ASCII mode.
# These ASCII options are split into upload and download because you may wish
# to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),
# without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be
# on the client anyway..
#
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
# Set to NO if you want to disallow the PASV method of obtaining a data
# connection.
#
#pasv_enable=NO

# PAM setting. Do NOT change this unless you know what you do!
#
pam_service_name=vsftpd

# Set listen=YES if you want vsftpd to run standalone
#
listen=YES

# Set to ssl_enable=YES if you want to enable SSL
ssl_enable=NO

marce
18.01.09, 17:13
... und jetzt formatierst Du das bitte noch mit den code-Tags des Forums, daß man es besser lesen kann...

shadow010
18.01.09, 17:18
Dumme Frage aber wie formatiere ich die?

shadow010
18.01.09, 17:34
Habe noch die Log-Datei überprüft die ist noch lehr

honkstar
18.01.09, 17:56
läuft der Server überhaupt?
Tipp mal netstat -antpu in der Konsole und poste mal das Ergebnis

marce
18.01.09, 17:57
es gibt ja eh noch ein paar austehende Informationen, um die bereits gebeten wurde...

shadow010
18.01.09, 18:11
Also die Konsole gibt mir folgendes wieder


bash: netstart: command not found
webserver:~ # netstat -antpu
Aktive Internetverbindungen (Server und stehende Verbindungen)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:5801 0.0.0.0:* LISTEN 3785/xinetd
tcp 0 0 0.0.0.0:5901 0.0.0.0:* LISTEN 3785/xinetd
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 3530/portmap
tcp 0 0 127.0.0.1:2544 0.0.0.0:* LISTEN 3563/zmd
tcp 0 0 0.0.0.0:6001 0.0.0.0:* LISTEN 5695/Xvnc
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 3753/vsftpd
tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 3755/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 3822/master
tcp 0 0 192.168.1.2:6001 192.168.1.2:19477 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19474 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19473 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19472 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19460 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19459 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19458 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19457 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19456 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19470 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19469 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19467 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19465 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19464 VERBUNDEN 5695/Xvnc
tcp 0 1 192.168.1.13:21939 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:21936 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:21943 192.168.1.13:6001 FIN_WAIT1 -
tcp 64 0 192.168.1.13:21947 192.168.1.13:6001 VERBUNDEN 4355/kded [kdeinit]
tcp 0 1 192.168.1.13:21950 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:21949 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1508 192.168.1.13:21931 192.168.1.13:6001 VERBUNDEN 4355/kded [kdeinit]
tcp 0 1 192.168.1.13:21930 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:21976 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:21954 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:21953 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 20 192.168.1.13:16848 192.168.1.13:6001 VERBUNDEN 4353/klauncher [kde
tcp 0 1 192.168.1.13:16541 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 1 192.168.1.13:18081 192.168.1.13:6001 FIN_WAIT1 -
tcp 0 0 192.168.1.2:19452 192.168.1.2:6001 VERBUNDEN 5818/kded [kdeinit]
tcp 0 0 192.168.1.2:19451 192.168.1.2:6001 VERBUNDEN 5811/kdeinit Runnin
tcp 0 0 192.168.1.2:19445 192.168.1.2:6001 VERBUNDEN 5779/dbus-launch
tcp 0 0 192.168.1.2:19467 192.168.1.2:6001 VERBUNDEN 5818/kded [kdeinit]
tcp 0 0 192.168.1.2:19464 192.168.1.2:6001 VERBUNDEN 5840/kmix [kdeinit]
tcp 0 0 192.168.1.2:19465 192.168.1.2:6001 VERBUNDEN 5816/klauncher [kde
tcp 0 0 192.168.1.2:19470 192.168.1.2:6001 VERBUNDEN 5845/konqueror [kde
tcp 0 0 192.168.1.2:19469 192.168.1.2:6001 VERBUNDEN 5854/kpowersave [kd
tcp 0 0 192.168.1.2:19458 192.168.1.2:6001 VERBUNDEN 5828/kdesktop [kdei
tcp 0 0 192.168.1.2:19459 192.168.1.2:6001 VERBUNDEN 5830/kicker [kdeini
tcp 0 0 192.168.1.2:19456 192.168.1.2:6001 VERBUNDEN 5825/ksmserver [kde
tcp 0 0 192.168.1.2:19457 192.168.1.2:6001 VERBUNDEN 5826/kwin [kdeinit]
tcp 0 0 192.168.1.2:19460 192.168.1.2:6001 VERBUNDEN 5833/kaccess [kdein
tcp 0 0 192.168.1.2:19474 192.168.1.2:6001 VERBUNDEN 5859/klipper [kdein
tcp 0 0 192.168.1.2:19472 192.168.1.2:6001 VERBUNDEN 5843/knotify [kdein
tcp 0 0 192.168.1.2:19473 192.168.1.2:6001 VERBUNDEN 5849/zen-updater
tcp 0 0 192.168.1.2:19478 192.168.1.2:6001 TIME_WAIT -
tcp 0 0 192.168.1.2:19477 192.168.1.2:6001 VERBUNDEN 5878/konsole [kdein
tcp 32 0 192.168.1.2:15590 192.168.1.2:6001 VERBUNDEN 5702/-192.168.1.2:1
tcp 0 0 192.168.1.2:5901 192.168.1.35:55955 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19445 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19452 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:19451 VERBUNDEN 5695/Xvnc
tcp 0 0 192.168.1.2:6001 192.168.1.2:15590 VERBUNDEN 5695/Xvnc
tcp 0 0 :::6001 :::* LISTEN 5695/Xvnc
tcp 0 0 :::22 :::* LISTEN 3756/sshd
tcp 0 0 ::1:25 :::* LISTEN 3822/master
udp 0 0 0.0.0.0:32768 0.0.0.0:* 3502/mdnsd
udp 0 0 0.0.0.0:1212 0.0.0.0:* 5695/Xvnc
udp 1832 0 0.0.0.0:68 0.0.0.0:* 2572/dhcpcd
udp 0 0 0.0.0.0:5353 0.0.0.0:* 3502/mdnsd
udp 0 0 0.0.0.0:111 0.0.0.0:* 3530/portmap
udp 0 0 0.0.0.0:631 0.0.0.0:* 3755/cupsd
udp 0 0 :::177 :::* 2781/kdm
webserver:~ #

marce
18.01.09, 18:11
code-Tags?

Und wo bleiben die anderen gewünschten Infos?

shadow010
18.01.09, 18:16
welche Infos brauchst du noch marce?

marce
18.01.09, 18:20
http://www.linuxforen.de/forums/showpost.php?p=1692849&postcount=5

shadow010
18.01.09, 18:21
Ich habe jetzt noch vom Server auf dem die vsftpd installiert ist, im Browser die 127.0.0.1:21 eingegeben. Ich sehe dann die beiden Verzeichnisse

shadow010
18.01.09, 18:27
also die /var/log/vsftp.log ist leer da kann ich nichts posten...
und die ps -fe gibt folgendes an:

UID PID PPID C STIME TTY TIME CMD
root 1 0 0 16:38 ? 00:00:01 init [5]
root 2 1 0 16:38 ? 00:00:00 [ksoftirqd/0]
root 3 1 0 16:38 ? 00:00:00 [events/0]
root 4 1 0 16:38 ? 00:00:00 [khelper]
root 5 1 0 16:38 ? 00:00:00 [kthread]
root 7 5 0 16:38 ? 00:00:00 [kblockd/0]
root 8 5 0 16:38 ? 00:00:00 [kacpid]
root 103 5 0 16:38 ? 00:00:00 [pdflush]
root 104 5 0 16:38 ? 00:00:00 [pdflush]
root 106 5 0 16:38 ? 00:00:00 [aio/0]
root 105 1 0 16:38 ? 00:00:00 [kswapd0]
root 312 5 0 16:38 ? 00:00:00 [cqueue/0]
root 313 5 0 16:38 ? 00:00:00 [kseriod]
root 353 5 0 16:38 ? 00:00:00 [kpsmoused]
root 747 5 0 16:38 ? 00:00:00 [reiserfs/0]
root 840 1 0 16:38 ? 00:00:00 /sbin/udevd --daemon
root 1978 1 0 16:38 ? 00:00:00 /sbin/acpid
root 1992 1 0 16:38 ? 00:00:00 /sbin/syslog-ng
100 1993 1 0 16:38 ? 00:00:00 /usr/bin/dbus-daemon --system
root 1996 1 0 16:38 ? 00:00:00 /sbin/klogd -c 1 -x -x
root 2057 1 0 16:38 ? 00:00:00 /sbin/resmgrd
root 2073 1 0 16:38 ? 00:00:01 /usr/sbin/hald --daemon=yes --re
root 2172 2073 0 16:38 ? 00:00:00 hald-addon-acpi
root 2477 2073 0 16:38 ? 00:00:00 hald-addon-storage
root 2572 1 0 16:39 ? 00:00:00 /sbin/dhcpcd -C -D -K -R -N -t 9
root 2769 1 0 16:39 ? 00:00:00 /sbin/dhcpcd -C -R -G -N -Y -t 9
root 2781 1 0 16:39 ? 00:00:00 /opt/kde3/bin/kdm
root 2783 2781 0 16:39 tty7 00:00:01 /usr/X11R6/bin/X -br -nolisten t
root 2791 2781 0 16:39 ? 00:00:00 -:0
root 2805 2791 0 16:39 ? 00:00:00 /opt/kde3/bin/kdm_greet
mdnsd 3502 1 0 16:39 ? 00:00:00 /usr/sbin/mdnsd -f /etc/nss_mdns
nobody 3530 1 0 16:39 ? 00:00:00 /sbin/portmap
root 3558 1 0 16:39 ? 00:00:00 /sbin/auditd
root 3560 5 0 16:39 ? 00:00:00 [kauditd]
root 3639 1 0 16:39 ? 00:00:00 /usr/sbin/nscd
root 3736 1 0 16:39 ? 00:00:00 /usr/sbin/powersaved -d -f /var/
root 3753 1 0 16:39 ? 00:00:00 /usr/sbin/vsftpd
lp 3755 1 0 16:39 ? 00:00:00 /usr/sbin/cupsd
root 3756 1 0 16:39 ? 00:00:00 /usr/sbin/sshd -o PidFile=/var/r
root 3785 1 0 16:39 ? 00:00:00 /usr/sbin/xinetd
root 3822 1 0 16:39 ? 00:00:00 /usr/lib/postfix/master
postfix 3826 3822 0 16:39 ? 00:00:00 qmgr -l -t fifo -u
root 3843 1 0 16:39 ? 00:00:00 /usr/sbin/cron
root 4129 1 0 16:39 tty1 00:00:00 /sbin/mingetty --noclear tty1
root 4130 1 0 16:39 tty2 00:00:00 /sbin/mingetty tty2
root 4131 1 0 16:39 tty3 00:00:00 /sbin/mingetty tty3
root 4132 1 0 16:39 tty4 00:00:00 /sbin/mingetty tty4
root 4133 1 0 16:39 tty5 00:00:00 /sbin/mingetty tty5
root 4134 1 0 16:39 tty6 00:00:00 /sbin/mingetty tty6
root 4317 1 0 16:46 ? 00:00:00 dbus-daemon --fork --print-pid 8
root 3563 1 1 18:05 ? 00:00:15 zmd /usr/lib/zmd/zmd.exe --sle
postfix 6256 3822 0 18:19 ? 00:00:00 pickup -l -t fifo -u
nobody 6292 3785 8 18:22 ? 00:00:04 Xvnc :42 -inetd -once -query loc
root 6299 2781 0 18:22 ? 00:00:00 -192.168.1.2:2
root 6315 6299 0 18:22 ? 00:00:00 /bin/sh /usr/X11R6/bin/kde
root 6349 1 0 18:22 ? 00:00:00 /usr/bin/gpg-agent --sh --daemon
root 6353 1 0 18:22 ? 00:00:00 /usr/bin/dbus-launch --sh-syntax
root 6354 1 0 18:22 ? 00:00:00 dbus-daemon --fork --print-pid 8
root 6385 1 0 18:22 ? 00:00:00 kdeinit Running...
root 6388 1 0 18:22 ? 00:00:00 dcopserver [kdeinit] --nosid
root 6390 6385 0 18:22 ? 00:00:00 klauncher [kdeinit]
root 6392 1 1 18:22 ? 00:00:00 kded [kdeinit]
root 6397 6315 0 18:22 ? 00:00:00 kwrapper ksmserver
root 6399 1 0 18:22 ? 00:00:00 ksmserver [kdeinit]
root 6400 6385 1 18:22 ? 00:00:00 kwin [kdeinit] -session 1014ed7d
root 6402 1 2 18:22 ? 00:00:00 kdesktop [kdeinit]
root 6404 1 2 18:22 ? 00:00:00 kicker [kdeinit]
root 6405 6385 0 18:22 ? 00:00:00 kio_file [kdeinit] file /tmp/kso
root 6407 1 0 18:22 ? 00:00:00 kaccess [kdeinit]
root 6414 1 1 18:22 ? 00:00:00 kmix [kdeinit] -session 1014ed7d
root 6417 1 0 18:22 ? 00:00:00 knotify [kdeinit]
root 6420 6385 2 18:22 ? 00:00:00 konqueror [kdeinit] --preload
root 6422 6385 5 18:22 ? 00:00:01 zen-updater --desktop /usr/lib/z
root 6424 1 1 18:22 ? 00:00:00 kpowersave [kdeinit]
root 6435 1 0 18:22 ? 00:00:00 klipper [kdeinit]
root 6471 3563 92 18:22 ? 00:00:17 /usr/lib/zmd/parse-metadata /var
root 6501 6385 11 18:22 ? 00:00:00 konsole [kdeinit]
root 6502 6501 1 18:22 pts/1 00:00:00 /bin/bash
root 6518 6502 0 18:22 pts/1 00:00:00 ps -fe
webserver:~ #

shadow010
18.01.09, 20:09
habe jetzt den FTP Server mit rcsvftpd reload nochmals neu gestartet gin erstmal nichts dann den Server nochmals neu gestartet und wie ein wunder ploötzlich funktioniert alles