Страница 1 из 1
Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-07 12:40:35
Revolver
Настроил pureftpd через мускль, но есть трабла - фтп не виден через браузер.
Код: Выделить всё
# Port range for passive connections replies. - for firewalling.
PassivePortRange 30000 50000
Код: Выделить всё
# Force an IP address in PASV/EPSV/SPSV replies. - for NAT.
# Symbolic host names are also accepted for gateways with dynamic IP
# addresses.
ForcePassiveIP 10.17.17.2
Вопрос извечный - что делать?
Заранее спасибо
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-07 12:42:22
schizoid
а фаервол настроил?
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-07 12:46:06
revolver
Вроде бы да. С другой машины из этой же сети тоже не цепляется.
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-07 14:35:26
schizoid
ну покаж тада конфиг и правила фаера
а еще tcpdump-om глянь, где пакеты режутся...
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-07 18:12:53
Revolver
Код: Выделить всё
ChrootEveryone yes
# TrustedGID 100
# Turn on compatibility hacks for broken clients
BrokenClientsCompatibility no
# Maximum number of simultaneous users
MaxClientsNumber 100
# Fork in background
Daemonize yes
# Maximum number of sim clients with the same IP address
MaxClientsPerIP 4
# If you want to log all client commands, set this to "yes".
# This directive can be duplicated to also log server responses.
VerboseLog no
# List dot-files even when the client doesn't send "-a".
DisplayDotFiles yes
# Don't allow authenticated users - have a public anonymous FTP only.
AnonymousOnly no
# Disallow anonymous connections. Only allow authenticated users.
NoAnonymous yes
# Syslog facility (auth, authpriv, daemon, ftp, security, user, local*)
# The default facility is "ftp". "none" disables logging.
SyslogFacility ftp
# Display fortune cookies
# FortunesFile /usr/share/fortune/zippy
# Don't resolve host names in log files. Logs are less verbose, but
# it uses less bandwidth. Set this to "yes" on very busy servers or
# if you don't have a working DNS.
DontResolve yes
# Maximum idle time in minutes (default = 15 minutes)
MaxIdleTime 15
# LDAP configuration file (see README.LDAP)
# LDAPConfigFile /etc/pureftpd-ldap.conf
# MySQL configuration file (see README.MySQL)
MySQLConfigFile /usr/local/etc/pureftpd-mysql.conf
# Postgres configuration file (see README.PGSQL)
# PGSQLConfigFile /etc/pureftpd-pgsql.conf
# PureDB user database (see README.Virtual-Users)
# PureDB /etc/pureftpd.pdb
# Path to pure-authd socket (see README.Authentication-Modules)
# ExtAuth /var/run/ftpd.sock
# If you want to enable PAM authentication, uncomment the following line
# PAMAuthentication yes
# If you want simple Unix (/etc/passwd) authentication, uncomment this
# UnixAuthentication yes
LimitRecursion 2000 8
# Are anonymous users allowed to create new directories ?
AnonymousCanCreateDirs no
# If the system is more loaded than the following value,
# anonymous users aren't allowed to download.
MaxLoad 4
# Port range for passive connections replies. - for firewalling.
PassivePortRange 30000 50000
# Force an IP address in PASV/EPSV/SPSV replies. - for NAT.
# Symbolic host names are also accepted for gateways with dynamic IP
# addresses.
ForcePassiveIP 10.17.17.2
# Upload/download ratio for anonymous users.
AnonymousRatio 1 10
# Upload/download ratio for all users.
# This directive superscedes the previous one.
# UserRatio 1 10
# Disallow downloading of files owned by "ftp", ie.
# files that were uploaded but not validated by a local admin.
AntiWarez yes
# IP address/port to listen to (default=all IP and port 21).
# Bind 127.0.0.1,21
# Maximum bandwidth for anonymous users in KB/s
# AnonymousBandwidth 8
# Maximum bandwidth for *all* users (including anonymous) in KB/s
# Use AnonymousBandwidth *or* UserBandwidth, both makes no sense.
# UserBandwidth 8
# File creation mask. <umask for files>:<umask for dirs> .
# 177:077 if you feel paranoid.
Umask 133:022
# Minimum UID for an authenticated user to log in.
MinUID 100
# Allow FXP transfers for authenticated users.
AllowUserFXP no
# Allow anonymous FXP for anonymous and non-anonymous users.
AllowAnonymousFXP no
# Users can't delete/write files beginning with a dot ('.')
# even if they own them. If TrustedGID is enabled, this group
# will have access to dot-files, though.
ProhibitDotFilesWrite no
# Prohibit *reading* of files beginning with a dot (.history, .ssh...)
ProhibitDotFilesRead no
# Never overwrite files. When a file whoose name already exist is uploaded,
# it get automatically renamed to file.1, file.2, file.3, ...
AutoRename no
# Disallow anonymous users to upload new files (no = upload is allowed)
AnonymousCantUpload yes
# Only connections to this specific IP address are allowed to be
# non-anonymous. You can use this directive to open several public IPs for
# anonymous FTP, and keep a private firewalled IP for remote administration.
# You can also only allow a non-routable local IP (like 10.x.x.x) to
# authenticate, and keep a public anon-only FTP server on another IP.
#TrustedIP 10.1.1.1
# If you want to add the PID to every logged line, uncomment the following
# line.
#LogPID yes
# Create an additional log file with transfers logged in a Apache-like format :
# fw.c9x.org - jedi [13/Dec/1975:19:36:39] "GET /ftp/linux.tar.bz2" 200 21809338
# This log file can then be processed by www traffic analyzers.
# AltLog clf:/var/log/pureftpd.log
# Create an additional log file with transfers logged in a format optimized
# for statistic reports.
AltLog stats:/var/log/pureftpd.log
# Create an additional log file with transfers logged in the standard W3C
# format (compatible with most commercial log analyzers)
# AltLog w3c:/var/log/pureftpd.log
# Disallow the CHMOD command. Users can't change perms of their files.
#NoChmod yes
# Allow users to resume and upload files, but *NOT* to delete them.
#KeepAllFiles yes
# Automatically create home directories if they are missing
#CreateHomeDir yes
# Enable virtual quotas. The first number is the max number of files.
# The second number is the max size of megabytes.
# So 1000:10 limits every user to 1000 files and 10 Mb.
#Quota 1000:10
#PIDFile /var/run/pure-ftpd.pid
#CallUploadScript yes
MaxDiskUsage 60
#NoRename yes
CustomerProof yes
# PerUserLimits 3:20
# NoTruncate yes
# TLS 1
# Listen only to IPv4 addresses in standalone mode (ie. disable IPv6)
# By default, both IPv4 and IPv6 are enabled.
IPV4Only yes
# FileSystemCharset big5
# ClientCharset big5
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-10 7:40:55
Revolver
Ну что? Повыводились добрые люди?
Подскажите как жить-то дальше
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-10 8:04:25
Alex Keda
нет. просто его никто не использует
))
и кстати а почему именно он?
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-10 12:32:18
Revolver
Ну здрасьте
Тов. Лисяра, статьи пишите, а народ потом мучается
))
Подскажите тогда что лучше использовать? Какой сервер?
Нужен доступ из браузера (пассив) и через клиента.
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-10 12:36:39
schizoid
пользую proftp
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-10 13:06:49
Revolver
Попробуем...
Re: Pureftpd: Passive FTP -ТРАБЛА
Добавлено: 2007-08-10 15:00:01
Alex Keda
Revolver писал(а):Ну здрасьте
Тов. Лисяра, статьи пишите, а народ потом мучается
))
Подскажите тогда что лучше использовать? Какой сервер?
Нужен доступ из браузера (пассив) и через клиента.
на моментт написания статьи (два чтоли года назад) - это был единственный ftp умевший перекодировать имена.
щас умеет proftpd - не знаю умеет ли портовый - но порт того который умеет лежит где-то на форуме