ftp from my Win2k machine to linux fails, but not from other unix boxes

[support_5]

Hi all,

If I try run ftp on another Unix box in my site to my linux box, I can log in with no problems, however, when I try from my Win 2000 machine, I am not allowed to connect. I get this error:
c:\> ftp
Connected to .
Connection closed by remote host.

c:\>

So what is it that causes this to fail? I am assuming it is some sort of security feature or something.

I am running Mandrake 8.1, xinetd, wu-ftpd

Thanks in advance,

- Andy Gray

[Ron Kinner · Accepted solution]

Any chance that it may have the wrong ip address for the box? Compare
nslookup
on your W2K and on a UNIX system. Same IP address. Also make sure that your Linux box gets the same result.

Are these all on the same subnet?

IF you are running tcpd (look in /etc/intd.conf) then the following applies:

The tcpd program is a wrapper program that can be set up to monitor incoming requests for telnet, finger, ftp and other Internet services. It works as follows: whenever a request for service arrives, the inetd daemon runs tcpd, which logs the request and does some checking. When all is well, tcpd runs the appropriate server program and goes away. For details, see the tcpd manual page. Access control for tcpd is configured using the /etc/hosts.allow and /etc/hosts.deny files. tcpd looks at hosts.allow then hosts.deny. It stops at the first match. Consequently, one can permit a few machines to have ftp or telnet access and then deny access to everybody else in hosts.deny. Here is a sample /etc/hosts.allow:

ALL: 10.100.10.0/255.255.255.0

The ALL refers to all wrapped inetd services. This does not include stand-alone services. The second field 10.100.10.0/255.255.255.0 means all machines on the 10.100.10.0 subnet have access to all the services. Now we want to disallow access for everybody else. Put the following line into /etc/hosts.deny:

ALL: ALL

Ron

[support_5]

Yep, there are some entries in the /etc/hosts.deny that match the PC I am connecting from. Strange that they should be there... Anyway, I have removed the entries and lo & behold, I can now connect! I should have known!

Thanks!

- Andy Gray