[sllug-members]: vsftpd problems

[Knight Walker]

On Thu, 2008-02-07 at 15:17 -0800, Rusty Keele wrote:
> Hi,
> 
>     I have recently set up vsftpd on our server, but I am having a few
> problems.
> 
>     I am using SuSE Linux Enterprise Server 10, and I can connect to
> the ftp server from another machine and log in as a local user.  Once
> I am logged in I can issue the 'pwd' command without any problems, but
> if I try the 'ls' command I get  "229 Entering Extended Passive Mode
> (|||12313|)" ... and then it freezes up and nothing else happens.
> 
>     If I turn off the server's firewall it works like a charm.  I am
> guessing that it is a problem with port numbers, and I have opened
> ports 20 & 21 on the server's firewall - but no luck. 
> 
>     Any ideas what I am doing wrong?

I don't know about "extended" but "passive mode" generally means the
server opens ANOTHER port and your client connects to the server on that
port for the data.  That's why things like pwd work but getting anything
that requires more data (ls) doesn't.

On the server, can you check and see if the nf_conntrack_ftp and
nf_nat_ftp modules are loaded?  I'm guessing not.  They're the modules
that check for passive mode FTP connections and translate them to allow
connections through the firewall.

At least, that's what fixed a similar issue like that for me.

-KW