Re: [Proftpd-user] NAT issue with virtualHost

> This config works (without VirtualHost): No issue.

Can you clarify what "works" means, specifically?  That is, are TCP connections not accepted?  Is authentication failing?  Does authentication succeed, but data transfers (including directory listings) stall/fail?

The ways in which things fail, or don't work as expected, can help indicate the causes/factors involved.

> ==================================================
> DefaultAddress                  <private_ip>
> Port                            21
> DefaultServer                   off
> MasqueradeAddress       <public_ip>
> PassivePorts                    60000 65535
> ==================================================
> 
> This one does not work (commands hanging over passive ftp connection):
> 
> ==================================================
> Port 0
> DefaultServer                   off
> PassivePorts                    60000 65535
> 
> <VirtualHost <private_ip>>
>         Port                    21
>         MasqueradeAddress       <public_ip>

My initial guess is that, in this second case, the PassivePorts directive is not in effect for the <VirtualHost>.

Directives outside of any <Global> (or <VirtualHost>) section are not automatically globally applied; see:

  http://www.proftpd.org/docs/howto/Vhost.html

> ==================================================
> This one does not work either: warning: "Virtual Server" address/port 
> (xxxxx) already in use by "ProFTP server"
> ==================================================
> Port 21
> DefaultServer                   off
> PassivePorts                    60000 65535
> 
> <VirtualHost <private_ip>>
>         MasqueradeAddress       <public_ip>

In this particular case, the warning is saying that your <VirtualHost> section is using Port 21 (the default value) by default -- and that it is colliding with the "server config" (default vhost), which is also using Port 21.

Hope this helps,
TJ


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html