proftpd errors

[Juan M Leon]

Hello, I am not familiar with proftp, I need some help. I just confgured a proftpserver I followed all the instructiions.
I am able to loing using the allowed account, but I am unable to execute a listing directory
once I enter "ls" the screen hungs and then I receive the following error.

ftp> ls
200 PORT command successful
425 Unable to build data connection: Connection timed out

in the syslog I see the following entry.

Jul 27 09:40:54 host proftpd[16421]: host (hotsb [xxx.xxx.xxx.xxx]) - PRIVS_RELINQUISH: unable to setregid(session.gid, PR_ROOT_GID): Not owner


Any suggestions.

Thank you
Juan

[Patrick Wallek · Accepted solution]

The error sounds as if it is having trouble talking on port 20.

Make sure both FTP ports, data port is TCP port 20 and control port is TCP port 21, are allowed through a firewall, if a firewall is involved.

[Charles H Emery]

Hello Juan,
I do not know much about ProFTP specifically,
However, try here for example configurations: http://www.proftpd.org/docs/example-conf.html

[Juan M Leon]

Patric thank you for your prompt response.
the firewall is allowing the connection.
I get a successful login.

- I am not following your suggestion about port 20. I believe the configuration file is set to port 21.

# Port 21 is the standard FTP port.
Port 21

[Patrick Wallek]

FTP actually uses 2 TCP ports.

Port 20 is the FTP DATA port.
Port 21 is the FTP command port.

Have a look at an /etc/services file and you will see 2 entries for FTP.

For normal FTP you MUST allow BOTH port 20 and 21.

You could try PASSIVE FTP and see if you can get away with just port 21 in that case.

[Juan M Leon]

Patrick,
I checked the services files. And I see both ports set in the file
ftp-data 20/tcp # File Transfer Protocol (Data)
ftp 21/tcp # File Transfer Protocol (Control)
tftp 69/udp # Trivial File Transfer Protocol
sftp 115/tcp # Simple File Transfer Protocol
bftp 152/tcp # Background File Transfer Protocol
ftp-ftam 8868/tcp # FTP->FTAM Gateway


Question, do I need both ports allow in the firewall?


Charles,

Thanks for the info. I comparing the examples with my config file.

[Patrick Wallek]

Yes, that would be my recommendation.

[Juan M Leon]

Patrick,

I was able to successfully list directories from another computer with in diff network.
That solves my 425 error.

Do y ou have any ideas on the entries in the syslog:
Jul 27 09:40:54 host proftpd[16421]: host (hotsb [xxx.xxx.xxx.xxx]) - PRIVS_RELINQUISH: unable to setregid(session.gid, PR_ROOT_GID): Not owner