Re: [Proftpd-user] 1.3.7e + openssl 3.0.2 on Ubuntu 22.04 LTS large file problem?

"John Stoffel" <[email protected]> Mon, 3 Apr 2023 15:13:47 -0400
Newsgroups gmane.network.proftpd.user
Message-ID <[email protected]>
>>>>> "John" == John Stoffel <[email protected]> writes:

>>>>> "TJ" == TJ Saunders <[email protected]> writes:
>>> I've had a customer run into a problem where they tried uploading
>>> files larger than 2gb to our Ubuntu 22.04 LTS server, where I had
>>> self-compiled proftpd 1.3.7e (but most likely on 21.04!) and they
>>> would randomly break when sending files.
>>> 
>>> I'm really only using mod_sftp on this host to allow customers to
>>> send/get files from us.

>> There aren't any ProFTPD-imposed file size limitations by default.
>> That said, for SFTP transfers, some clients do not handle rekeying
>> well (a similar phenomenon occurs for FTPS clients and
>> renegotiations).  And the default behavior for mod_sftp is to
>> request rekeying after 1 hour, or 2GB, whichever comes first:

>> http://www.proftpd.org/docs/contrib/mod_sftp.html#SFTPRekey

>> So as an initial guess/experiment, you see if disabling SFTP
>> rekeying improves (or at least changes) the situation:

>> <IfModule mod_sftp.c>
>> ...
>> SFTPRekey none
>> </IfModule>

>> Hope this helps,
>> TJ

> Thanks, I'll try this out tomorrow and see how it goes.  

This seems to have fixed things.  Should this be the default moving
forward?  I realize it's maybe not ideal from a cryptographic
standpoint, but ... it was hard to diagnose.  So maybe just some
better logging, where you mention it's been re-keyed.  

In anycase, so far things are looking good!
John


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html