ftp

[Nobody's Hero]

on a new linux RH9 box I can ftp out to another box. But I cant ftp into the box from another server. I get connection refused. How can I fix this?

[john kingsley]

Secure ftp (sftp) should be running, but this won't do you any good if Secure Shell (ssh) is not loaded on your client.

Make sure that the ftp server was loaded with your installation. It may not have been.
Start Here --> System Settings --> Add or Remove Packages --> [servers -- FTP Server]

or you can check by running:

rpm -q vsftpd

If you don't see it you will need to install it. Then make sure xinetd is configured to start vsftpd.

Check to see if /etc/xinetd.d/vsftpd exists.
If it doesn't exist, copy
/usr/share/doc/vsftpd-/vsftpd.xinetd
to
/etc/xinetd.d/vsftpd.

Then you'll need to edit
/etc/xinetd.d/vsftpd
Make sure "disable = no" is set in this file.

If you make any changes to the xinetd configuration, you will need to restart it:
/etc/init.d/xinetd stop
/etc/init.d/xinetd start

You will probably also need to update the vsftpd configuration:
/etc/vsftpd/vsftpd.conf

[Steven E. Protter]

It is now common to not run ftpd daemons on boxes.

vsftp has its own daemon and it should be checked on the target RH9 box.

service vsfptd status

Connection refused also could be a block on port 20 and or 21 on the iptables firewall. That should be checked as well as well as intervening hardware firewalls if any.

SEP

[Vitaly Karasik_1]

by defauld RH installer doesn't start ftp server,

you should run

chkconfig vsftpd on

and

service vsftpd start


in order to start ftp server.

Rgds,
Vitaly

[tony j. podrasky]

And if you are on a secure network, and
wouldn't care if someone was to hack into
the box, you can cd to /etc/pam.d, and edit
the vfstpd file, changing everything to
"required".

[Huc_1]

You should also make sure "firewall" (probably iptables) is not refusing your connection (even on your localhost)

a way to check this is as root

# nmap "your ip address"
# nmap localhost

if you see ftp as an open port the connection from the firewall point of view is allowed


Jean-Pierre