topic Re: proftpd errors in Operating System - HP-UX

proftpd errors

Juan M Leon — Fri, 27 Jul 2007 09:13:24 GMT

Hello, I am not familiar with proftp, I need some help. I just confgured a proftpserver I followed all the instructiions.
I am able to loing using the allowed account, but I am unable to execute a listing directory
once I enter "ls" the screen hungs and then I receive the following error.

ftp> ls
200 PORT command successful
425 Unable to build data connection: Connection timed out

in the syslog I see the following entry.

Jul 27 09:40:54 host proftpd[16421]: host (hotsb [xxx.xxx.xxx.xxx]) - PRIVS_RELINQUISH: unable to setregid(session.gid, PR_ROOT_GID): Not owner

Any suggestions.

Thank you
Juan

Re: proftpd errors

Patrick Wallek — Fri, 27 Jul 2007 09:17:42 GMT

The error sounds as if it is having trouble talking on port 20.

Make sure both FTP ports, data port is TCP port 20 and control port is TCP port 21, are allowed through a firewall, if a firewall is involved.

Re: proftpd errors

Charles H Emery — Fri, 27 Jul 2007 09:24:30 GMT

Hello Juan,
I do not know much about ProFTP specifically,
However, try here for example configurations: http://www.proftpd.org/docs/example-conf.html

Re: proftpd errors

Juan M Leon — Fri, 27 Jul 2007 09:29:28 GMT

Patric thank you for your prompt response.
the firewall is allowing the connection.
I get a successful login.

- I am not following your suggestion about port 20. I believe the configuration file is set to port 21.

# Port 21 is the standard FTP port.
Port 21

Re: proftpd errors

Patrick Wallek — Fri, 27 Jul 2007 09:34:50 GMT

FTP actually uses 2 TCP ports.

Port 20 is the FTP DATA port.
Port 21 is the FTP command port.

Have a look at an /etc/services file and you will see 2 entries for FTP.

For normal FTP you MUST allow BOTH port 20 and 21.

You could try PASSIVE FTP and see if you can get away with just port 21 in that case.

Re: proftpd errors

Juan M Leon — Fri, 27 Jul 2007 09:39:17 GMT

Patrick,
I checked the services files. And I see both ports set in the file
ftp-data 20/tcp # File Transfer Protocol (Data)
ftp 21/tcp # File Transfer Protocol (Control)
tftp 69/udp # Trivial File Transfer Protocol
sftp 115/tcp # Simple File Transfer Protocol
bftp 152/tcp # Background File Transfer Protocol
ftp-ftam 8868/tcp # FTP->FTAM Gateway

Question, do I need both ports allow in the firewall?

Charles,

Thanks for the info. I comparing the examples with my config file.

Re: proftpd errors

Patrick Wallek — Fri, 27 Jul 2007 09:41:20 GMT

Yes, that would be my recommendation.

Re: proftpd errors

Juan M Leon — Fri, 27 Jul 2007 10:24:12 GMT

Patrick,

I was able to successfully list directories from another computer with in diff network.
That solves my 425 error.

Do y ou have any ideas on the entries in the syslog:
Jul 27 09:40:54 host proftpd[16421]: host (hotsb [xxx.xxx.xxx.xxx]) - PRIVS_RELINQUISH: unable to setregid(session.gid, PR_ROOT_GID): Not owner