Re: [Proftpd-user] 1.3.7e + openssl 3.0.2 on Ubuntu 22.04 LTS large file problem?
"John Stoffel" <[email protected]> Mon, 3 Apr 2023 15:13:47 -0400
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
>>>>> "John" == John Stoffel <[email protected]> writes: >>>>> "TJ" == TJ Saunders <[email protected]> writes: >>> I've had a customer run into a problem where they tried uploading >>> files larger than 2gb to our Ubuntu 22.04 LTS server, where I had >>> self-compiled proftpd 1.3.7e (but most likely on 21.04!) and they >>> would randomly break when sending files. >>> >>> I'm really only using mod_sftp on this host to allow customers to >>> send/get files from us. >> There aren't any ProFTPD-imposed file size limitations by default. >> That said, for SFTP transfers, some clients do not handle rekeying >> well (a similar phenomenon occurs for FTPS clients and >> renegotiations). And the default behavior for mod_sftp is to >> request rekeying after 1 hour, or 2GB, whichever comes first: >> http://www.proftpd.org/docs/contrib/mod_sftp.html#SFTPRekey >> So as an initial guess/experiment, you see if disabling SFTP >> rekeying improves (or at least changes) the situation: >> <IfModule mod_sftp.c> >> ... >> SFTPRekey none >> </IfModule> >> Hope this helps, >> TJ > Thanks, I'll try this out tomorrow and see how it goes. This seems to have fixed things. Should this be the default moving forward? I realize it's maybe not ideal from a cryptographic standpoint, but ... it was hard to diagnose. So maybe just some better logging, where you mention it's been re-keyed. In anycase, so far things are looking good! John _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html