[linux-help] Re: ftp

[Jeff <schaller@xxxxxxxxxxxxx>]

On Thu, 6 Jul 2000, Craig Terhune wrote:

> On Thu, 06 Jul 2000, you wrote:
> > On Tue, 4 Jul 2000, Craig Terhune wrote:
> > 
> > > [ ftp from NT to linux fails, ping OK ]
> > 
> > What specific error(s) do you get? 
> (connection refused)

> > Is ftp still installed? 
> ( Yes)

> > Did you HUP inetd? 
> (I huped and booted)

> > Is it firewalled off? 
> (not using one.)

> With telnet I get connection failed

> This is a copy of my inetd.conf if this will help
> 
> time  stream  tcp     nowait  root    internal
> time  dgram   udp     wait    root    internal

(side remark; I'd suggest commenting these out and using (x)ntp)

> ftp   stream  tcp     nowait  root    /usr/sbin/tcpd  wu.ftpd -a
>  ftp  stream  tcp     nowait  root    /usr/sbin/tcpd  proftpd
> ftp   stream  tcp     nowait  root    /usr/sbin/tcpd  in.ftpd

I'm suspecting misbehavior based on having these three uncommented
ftp lines in inetd.conf. Comment out two of them, leaving the one
you expect to run, and try again. If, after HUPping inetd, you
still get a 'connection refused', I'd suspect tcp_wrappers is
denying the connection.  Check the appropriate log file (where
tcp_wrappers is sending it's logs) and/or the /etc/hosts.allow and
/etc/hosts.deny files.  If you get to that point, I'd recommend
sanitizing the files before posting them to the list, unless
you're sure no one would ever get close enough to the linux host
to matter.  In particular we'd only need to see the relevant lines
(to the in.ftpd service, your username, and the NT host).

As another aside, wu-ftp has had a bad time recently in the
security lists; I'd suggest using proftpd.

-jeff
-- 
Last Friday, Rudy Giuliani ... announced that he would not run against
Hillary Clinton due to his recently diagnosed cancer. What do you think?
"Mess with Hillary, get cancer. That's the kind of tough representation I want
in Washington." Linda Langevin, English Teacher. http://www.theonion.com


-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi