Re: [Proftpd-user] HOW TO DISABLE EPSV IN PROFTPD 1.3.6

Télécharger Outlook pour Android<https://aka.ms/ghei36>

________________________________
From: Christian Gaudin <[email protected]>
Sent: Thursday, January 4, 2018 4:35:14 PM
To: [email protected]
Subject: RE: [Proftpd-user] HOW TO DISABLE EPSV IN PROFTPD 1.3.6


Thanks for answer Matus,

see a capture  trying to fpt from a local computer on same Lan , so no firewall or L3 switch on this network.

Computer IP .65, FTP Host .200

[https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/9043166355/original/DriRBN1OZOCj06Hxv6QWyD4UkBczopCWig.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJ2JSYZ7O3I4JO6DA%2F20180104%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180104T162826Z&X-Amz-Expires=300&X-Amz-Signature=2f3110aef65c9e88a6b4fbe5c5fcc858a0c7bb45a0e531bf46c0785a3e8fafe4&X-Amz-SignedHeaders=Host]


on ftp host side  i've tried with settings

 <Limit EPSV>
    DenyAll
  </Limit>

 <Limit EPSV EPRT>
    DenyAll
  </Limit>

none of both give a result , everytime  transfer aborted and only file name 0 bytes created on FTP host



________________________________
De : Matus UHLAR - fantomas <[email protected]>
Envoyé : jeudi 4 janvier 2018 17:05
À : [email protected]
Objet : Re: [Proftpd-user] HOW TO DISABLE EPSV IN PROFTPD 1.3.6

On 04.01.18 15:03, Christian Gaudin wrote:
>Hi, i'm using a freenas server v11.1 stable release including proftpd 1.3.6.
>
>i'm experiencing ftp  hang in data transfert since i updated from freenas
> 9.10.2-U6 to V11.1, I don't know what changed in proftp bur for now it-s
> impossible for me to backup from remote computers using ftp client hard
> coded in their software.
>
>The problem seems to be that FTP server feature EPSV is enabled and client are not supporting this mode.

if client does not support EPSV parameter, it will not use it so proftpd
doesn't have to reply to it.

>I've tried to use the limit command in proftpd.conf with no result.

show us the config (pastebin if more than a few lines)

>So is it possible to completly diasble EPSV ?

yes, using <limit>

when I've had problems with epsv, it was problem of intermediate firewall
(L3 switch) that did not support EPSV, not the server or client.

--
Matus UHLAR - fantomas, [email protected] ; https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fantomas.sk%2F&data=02%7C01%7C%7C88988e375ece43b1695408d5538cfd68%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636506787357541898&sdata=eSQx2%2FlkESq8W8Ggo2qs73bSE2V5oHBLcb4blA9gBOA%3D&reserved=0
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsdm.link%2Fslashdot&data=02%7C01%7C%7C88988e375ece43b1695408d5538cfd68%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636506787357541898&sdata=jr%2BQKzit1KosNTqla4UhqwSOmPpc75VJENNbpg09y5g%3D&reserved=0
_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.proftpd.org%2Flist-unsub.html&data=02%7C01%7C%7C88988e375ece43b1695408d5538cfd68%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636506787357541898&sdata=ZYP12matFAagBerv%2FaztAAbtIc%2FgspGDG48Pk%2F%2FBZBQ%3D&reserved=0

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html