Re: [Proftpd-user] PROFTPD - ERROR:> unexp. packet type 95 in respond to SSH_MSG_CHANNEL_REQUEST (error #77)
Rob Coops <[email protected]> Tue, 24 Jun 2025 15:28:57 +0200
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <CABPR7FHvnmYv5_Edgos+zZfLzdgAfa1BJEp+nJCeqPW0TmCcjw@mail.gmail.com> |
--===============1506295353163466050== Content-Type: multipart/alternative; boundary="00000000000025300e06385150e4" --00000000000025300e06385150e4 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Ah sorry you will have to switch on tracing where you will see the negotiation of the client and the server in the log. That is where the client is identified and you can see things like the protocol version and so on being negotiated. I should have mentioned that my bad. Regards, Rob Coops On Tue, Jun 24, 2025 at 3:19=E2=80=AFPM Cosmin Neagu <[email protected]= m> wrote: > Hi Rob, > Thanks for the clarification. > Do you know how can I identify what version and what banner the client is > sending? Would need that to use SFTPClientMatch. Can't really catch it wi= th > wireshark. > And maybe, what would be the default sftpProtocolVersion, cause it's not > stated in the docs. > > > Best regards, > > *Cosmin Neagu* > > Network Architect > > Phone +40.744.625.033 > ------------------------------ > *From:* Rob Coops <[email protected]> > *Sent:* Tuesday, June 24, 2025 3:49 PM > *To:* [email protected] <[email protected]= t > > > *Cc:* Cosmin Neagu <[email protected]> > *Subject:* Re: [Proftpd-user] PROFTPD - ERROR:> unexp. packet type 95 in > respond to SSH_MSG_CHANNEL_REQUEST (error #77) > > Hi Cosmin, > > This looks very familiar, what is happening here is that the version of > the protocol used by the client and the server do not match. This happens > quite often when the client is slightly older. What happens is that the > client or the server but typically it is the client that does this has no= t > fully or correctly implemented the protocol version it claims to support. > As a result the one of the two sides will send a something over to the > other side that is unexpected and you end up with a disconnect because it > has no idea what to do with this. > > This part of the documentation: http://www.proftpd.org/docs/contrib/mod_s= ftp.html > [proftpd.org] > <https://urldefense.com/v3/__http://www.proftpd.org/docs/contrib/mod_sftp= .html__;!!KFYUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_= RSLwoaIrAHJqXbcyu3Ciqc$> > and specifically this part: *SFTPClientMatch* will help you do this. > Using sftpProtocolVersion to force a older version (typically 3 will work > for nearly any client I have encountered) other things that you might wan= t > to mess with are: *channelWindowSize* and *channelPacketSize* you will > have to experiment with this a bit or try and find someone else that > figured this out for you by lookig for the client identifier and one of > these key words. > > Another option is change the client ot something that is better able to > handle the protocol version it claims to be using. If you have a sftp > server with many different clients connecting and especially clients that > you have no control over be ready to add more of these mentods to force > those clients to use an older version than the advertise especially in th= e > business world there are quite a few older clients around or clients that > are very recent but have not implemented the protocol correctly. > > I hope that helps, best regards, > > Rob Coops > > On Tue, Jun 24, 2025 at 2:24=E2=80=AFPM Cosmin Neagu via Proftp-user < > [email protected]> wrote: > > Hi Guys, > I have this peculiar error, which I'm having a hard time to troubleshoot > it. > > I have proftpd version 1.3.8b installed on 2 production servers, and a > client using TurboFTP client, complains about getting this error, after > succesfull authentication: > *unexp. packet type 95 in respond to SSH_MSG_CHANNEL_REQUEST (error #77)* > > Getting this issue on both production server, even though I setup a test > instance, same version, copy paste the config, and there I cannot replica= te > the issue, it works. > Other SFTP clients (filezila, winscp etc) do not have this error. > > Would appreciate if someone can point me in the right direction to > troubleshoot this. > > > > Below the error, and debugs, and config > > #TurboFTP logs > TurboFTP 64-bit Version 7.10 Build 1573 - WinSock 2.0 > Unregistered evaluation copy. The evaluation period will expire in 29 > days. > STATUS:> Connecting to A.B.C.D Port 22 (try #1) ... > Server version: SSH-2.0-Azets FTP > COMMAND:> Sent client version string 'SSH-2.0-TurboFTP_SSHM_2.680' > STATUS:> Crypto negotiation done, Server to client cipher:aes128-ctr, > mac:hmac-sha2-256, compression:none. > STATUS:> Crypto negotiation done, Client to server cipher:aes128-ctr, > mac:hmac-sha2-256, compression:none. > STATUS:> Key exchange done with ecdh-sha2-nistp256 and host key algo: > rsa-sha2-256 > STATUS:> Authenticating with method 'password' > STATUS:> Login successful. > ERROR:> unexp. packet type 95 in respond to SSH_MSG_CHANNEL_REQUEST (erro= r > #77) > STATUS:> Wait 10 seconds and try again... > > > #Proftpd config: > ubuntu@FTP-PROD3:/opt/proftpd-sftp/etc$ cat proftpd.conf > DisplayConnect /opt/proftpd-sftp/etc/DisplayConnect > DisplayQuit /opt/proftpd-sftp/etc/DisplayQuit > DisplayLogin /opt/proftpd-sftp/etc/DisplayLogin > ServerIdent on "Azets FTP" > ServerName "Azets File Transfer Server" > UseReverseDNS off > MaxInstances 1000 > MaxClients 999 "Max Clients reached!" > MaxClientsPerHost 50 "Max Clients per Host reached!" > MaxClientsPerUser 50 "Max Client per User reached!" > MaxLoginAttempts 3 > TimeoutLogin 120 > TimeoutIdle 300 > TimeoutNoTransfer 300 > TimeoutStalled 300 > ServerType standalone > DefaultServer on > UseIPv6 off > Umask 066 077 > User nobody > Group nogroup > DefaultRoot ~ > AllowOverwrite on > AuthOrder mod_sql.c > SQLAuthenticate users > SQLConnectInfo PROFTPD@dburl user pass > SQLUserInfo USERS USER PASS UID GID DIR NULL > SQLUserWhereClause "SFTP=3D1" > SQLAuthTypes Crypt > SQLMinID 1999 > SQLDefaultGID 2000 > SQLLog PASS updatecount > SQLNamedQuery updatecount UPDATE "COUNT=3DCOUNT+1,LAST=3Dnow() WHERE > USER=3D'%u'" USERS > CreateHome on > WtmpLog off > <IfModule mod_unique_id.c> > LogFormat logformat "%{%Y-%m-%d %H:%M:%S}t.%{millisecs} %{UNIQUE_ID}e %a > %{remote-port} %u \"%r\" %s %S %bbytes %Tsec %{transfer-status} > %{transfer-type} %{protocol}" > ExtendedLog /var/log/proftpd/sftp-extended.log > AUTH,INFO,DIRS,READ,WRITE,MISC,SEC,EXIT logformat > </IfModule> > <IfModule mod_sftp.c> > Port 22 > SFTPEngine on > SFTPHostKey /opt/proftpd-sftp/etc/sftp.azets.com.rsa.key > SFTPHostKey /opt/proftpd-sftp/etc/sftp.azets.com.ecdsa.key > SFTPAuthorizedUserKeys file:~/.sftp/authorized_keys > SFTPOptions IgnoreSFTPUploadPerms IgnoreSFTPSetOwners IgnoreSFTPSetPerms > IgnoreSFTPSetTimes > </IfModule> > <Limit SITE_CHMOD> > DenyAll > </Limit> > > > > > #PROD session logs with debug level 10 > > proftpd 172.18.128.117 [172.18.128.117] > <https://urldefense.com/v3/__http://172.18.128.117__;!!KFYUDeg!kkrWP_ub1f= TArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXbc_megAu4$>: > ROOT PRIVS at main.c:1327 > proftpd 172.18.128.117 [172.18.128.117] > <https://urldefense.com/v3/__http://172.18.128.117__;!!KFYUDeg!kkrWP_ub1f= TArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXbc_megAu4$>: > RELINQUISH PRIVS at main.c:1331 > proftpd 172.18.128.117 [172.18.128.117] > <https://urldefense.com/v3/__http://172.18.128.117__;!!KFYUDeg!kkrWP_ub1f= TArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXbc_megAu4$>: > no matching vhost found for 172.18.128.117#22, using 'Azets File Transfer > Server' listening on wildcard address > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > main.c:1136 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SETUP PRIVS at > main.c:1141 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): session requested > from client in unknown class > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): performing module > session initializations > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_unique_id/0.2: > generating unique session ID > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_unique_id/0.2: > unique session ID is 'aFm4zqwSgHVaX+nEABOGqwi7' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > keys.c:3644 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > keys.c:3651 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > keys.c:1026 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > keys.c:1033 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > keys.c:1026 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > keys.c:1033 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > keys.c:3644 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > keys.c:3651 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_sql/4.5: > defaulting to 'mysql' backend > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > mod_delay.c:2111 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > mod_delay.c:2114 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_log: opening > ExtendedLog '/var/log/proftpd/sftp-extended.log' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > mod_log.c:1284 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > mod_log.c:1287 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > mod_auth.c:215 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): opening scoreboard > '/opt/proftpd-sftp/var/proftpd.scoreboard' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > mod_auth.c:217 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): AuthOrder in > effect, resetting auth module order > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): connected - local > : 172.18.128.117:22 [172.18.128.117] > <https://urldefense.com/v3/__http://172.18.128.117:22__;!!KFYUDeg!kkrWP_u= b1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXbcQl-o9Vs$> > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): connected - remote > : 90.95.233.196:40873 [90.95.233.196] > <https://urldefense.com/v3/__http://90.95.233.196:40873__;!!KFYUDeg!kkrWP= _ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXbceoM-eds$= > > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SSH2 session opene= d. > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'KEXINIT' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'KEXINIT' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'ECDH_INIT' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'ECDH_INIT' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'NEWKEYS' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'NEWKEYS' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'SERVICE_REQUEST' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'SERVICE_REQUEST' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'USER user1' to mod_core > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'USER user1' to mod_core > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'USER user1' to mod_delay > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'USER user1' to mod_auth > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'USER user1' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'USER user1' to mod_delay > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'USER user1' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'USER user1' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'USER user1' to mod_delay > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'PASS (hidden)' to mod_core > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'PASS (hidden)' to mod_core > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'PASS (hidden)' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'PASS (hidden)' to mod_delay > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CM= D > command 'PASS (hidden)' to mod_auth > precatel be removed in a future version. > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): retrieved UID 2003 > for user 'user1' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): retrieved UID 2003 > for user 'user1' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > auth.c:1774 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > auth.c:1777 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER PRIVS 2003 at > auth.c:403 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > auth.c:405 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > mkhome.c:326 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > mkhome.c:371 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Config for Azets > File Transfer Server: > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Limit > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DenyAll > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DisplayConnect > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DisplayQuit > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DisplayLogin > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ServerIdent > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxClients > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxClientsPerHost > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxClientsPerUser > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxLoginAttempts > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutLogin > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutIdle > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutNoTransfer > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutStalled > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DefaultServer > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Umask > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DirUmask > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): UserID > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): UserName > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): GroupID > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): GroupName > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DefaultRoot > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): AllowOverwrite > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): AuthOrder > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLAuthenticate > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLConnectInfo > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUserTable > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUsernameField > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLPasswordField > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUidField > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLGidField > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLHomedirField > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUserWhereClause > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLAuthTypes > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLMinID > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLDefaultGID > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLLog_PASS > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): > SQLNamedQuery_updatecount > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): CreateHome > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): WtmpLog > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): LogFormat > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ExtendedLog > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Port > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPEngine > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPHostKey > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPHostKey > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): > SFTPAuthorizedUserKeys > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPOptions > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > auth.c:472 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): opening TransferLo= g > '/var/log/xferlog' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > auth.c:513 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER PRIVS 2003 at > auth.c:166 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): retrieved UID 2003 > for user 'user1' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > auth.c:171 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): set TZ environment > variable to 'UTC' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Preparing to chroo= t > to directory '/FTP/user1' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > auth.c:1912 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > auth.c:1915 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Environment > successfully chroot()ed > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > auth.c:547 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SETUP PRIVS at > auth.c:548 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > auth.c:574 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): REVOKE PRIVS at > auth.c:575 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): changed directory > to '/' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): in > dir_check_full(): path =3D '/', fullpath =3D '/FTP/user1/' > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): in > dir_check_full(): setting umask to 0077 (was 0066) > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER user1: Login > successful > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): user 'user1' > authenticated by mod_sql.c > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_sftp > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_delay > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_ls > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_auth > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS a= t > mod_auth.c:2175 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): UseReverseDNS off, > returning IP address instead of DNS name > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at > mod_auth.c:727 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS: ID > switching disabled > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): REVOKE PRIVS at > mod_auth.c:728 > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): REVOKE PRIVS: > unable to seteuid(): Operation not permitted > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RootRevoke in > effect, dropped root privs > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_rlimit > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_xfer > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'PASS (hidden)' to mod_core > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'PASS (hidden)' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'PASS (hidden)' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'PASS (hidden)' to mod_delay > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'PASS (hidden)' to mod_auth > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER user1: Login > successful. > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching > POST_CMD command 'USERAUTH_REQUEST user1 password' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'USERAUTH_REQUEST user1 password' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'USERAUTH_REQUEST user1 password' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'CHANNEL_OPEN session' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'CHANNEL_OPEN session' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'CHANNEL_REQUEST subsystem' to mod_sql > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CM= D > command 'CHANNEL_REQUEST subsystem' to mod_log > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_sftp/1.1.1: > scrubbing 2 passphrases from memory > proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SSH2 session close= d. > > > Best regards, > > *Cosmin Neagu* > > Network Architect > > Phone +40.744.625.033 > _______________________________________________ > ProFTPD Users List <[email protected]> > Unsubscribe problems? > http://www.proftpd.org/list-unsub.html [proftpd.org] > <https://urldefense.com/v3/__http://www.proftpd.org/list-unsub.html__;!!K= FYUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJ= qXbcgtDqle8$> > > --00000000000025300e06385150e4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Ah sorry you will have to switch on tracing=C2=A0where you= will see the negotiation=C2=A0of the client and the server in the log. Tha= t is where the client is identified and you can see things like the protoco= l version and so on being negotiated.<br><br>I should have mentioned that m= y bad.<br><br>Regards,<br><br>Rob Coops</div><br><div class=3D"gmail_quote = gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Jun 24= , 2025 at 3:19=E2=80=AFPM Cosmin Neagu <<a href=3D"mailto:cosmin.neagu@a= zets.com">[email protected]</a>> wrote:<br></div><blockquote class= =3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg= b(204,204,204);padding-left:1ex"><div class=3D"msg5387328796044047482"> <div dir=3D"ltr"> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Hi Rob,</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Thanks for the clarification.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Do you know how can I identify what version and what banner the client is s= ending? Would need that to use SFTPClientMatch. Can't really catch it w= ith wireshark.</div> <div id=3D"m_5387328796044047482Signature"> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> And maybe,=C2=A0what would be the default sftpProtocolVersion, cause it'= ;s not stated in the docs.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <p style=3D"margin-top:0px;margin-bottom:0px"><span style=3D"font-family:Ar= ial,sans-serif;font-size:9.75pt;color:black">Best regards,</span></p> <p style=3D"text-align:left;margin:0in 0in 0.0001pt"><span style=3D"font-fa= mily:Arial,sans-serif;font-size:9.75pt;color:black"><b>Cosmin Neagu</b></sp= an></p> <p style=3D"text-align:left;margin:0in 0in 0.0001pt"><span style=3D"font-fa= mily:Arial,sans-serif;font-size:10pt;color:black">Network Architect</span><= /p> <p style=3D"text-align:left;margin:0in 0in 0.0001pt"><span style=3D"font-fa= mily:Arial,sans-serif;font-size:10pt;color:black">Phone +40.744.625.033</sp= an></p> </div> <div id=3D"m_5387328796044047482appendonsend"></div> <hr style=3D"display:inline-block;width:98%"> <div id=3D"m_5387328796044047482divRplyFwdMsg" dir=3D"ltr"><font face=3D"Ca= libri, sans-serif" style=3D"font-size:11pt" color=3D"#000000"><b>From:</b> = Rob Coops <<a href=3D"mailto:[email protected]" target=3D"_blank">rcoops@= gmail.com</a>><br> <b>Sent:</b> Tuesday, June 24, 2025 3:49 PM<br> <b>To:</b> <a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a> <<a href=3D"mailto:proftp-u= [email protected]" target=3D"_blank">[email protected].= net</a>><br> <b>Cc:</b> Cosmin Neagu <<a href=3D"mailto:[email protected]" targe= t=3D"_blank">[email protected]</a>><br> <b>Subject:</b> Re: [Proftpd-user] PROFTPD - ERROR:> unexp. packet type = 95 in respond to SSH_MSG_CHANNEL_REQUEST (error #77)</font> <div>=C2=A0</div> </div> <div> <div dir=3D"ltr">Hi Cosmin,<br> <br> This looks very familiar, what is happening here is that the version of the= protocol used by the client and the server do not match. This happens quit= e often when the client is slightly older. What happens is that the client = or the server but typically it is the client that does this has not fully or correctly implemented the proto= col version it claims to support. As a result the one of the two sides will= send a something over to the other side that is unexpected and you end up = with a disconnect because it has no idea what to do with this.<br> <br> This part of the documentation:=C2=A0<a href=3D"https://urldefense.com/v3/_= _http://www.proftpd.org/docs/contrib/mod_sftp.html__;!!KFYUDeg!kkrWP_ub1fTA= rad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXbcyu3Ciqc$" targe= t=3D"_blank">http://www.proftpd.org/docs/contrib/mod_sftp.html [proftpd.org]</a> and specifically this part: <b>SFTPClientMatch</b>=C2=A0= will help you do this. Using=C2=A0sftpProtocolVersion to force a older vers= ion (typically 3 will work for nearly any client I have encountered) other = things that you might want to mess with are:=C2=A0<b>channelWindowSize</b> and=C2=A0<b>channelPacketSize</b> you will have to experiment with this a = bit or try and find someone else that figured this out for you by lookig fo= r the client identifier and one of these key words.<br> <br> Another option is change the client ot something that is better able to han= dle the protocol version it claims to be using. If you have a sftp server w= ith many different clients connecting and especially clients that you have = no control over be ready to add more of these mentods to force those clients to use an older version than = the advertise especially in the business world there are quite a few older = clients around or clients that are very recent but have not implemented the= protocol correctly.<br> <br> I hope that helps, best regards,<br> <br> Rob Coops</div> <br> <div> <div dir=3D"ltr">On Tue, Jun 24, 2025 at 2:24=E2=80=AFPM Cosmin Neagu via P= roftp-user <<a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a>> wrote:<br> </div> <blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204= ,204,204);padding-left:1ex"> <div> <div dir=3D"ltr"><span style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_= MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"= >Hi Guys,</span> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> I have this peculiar error, which I'm having a hard time to troubleshoo= t it.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> I have proftpd version 1.3.8b installed on 2 production servers, and a clie= nt using TurboFTP client, complains about getting this error, after succesf= ull authentication:</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <b>unexp. packet type 95 in respond to SSH_MSG_CHANNEL_REQUEST (error #77)<= /b></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Getting this issue on both production server, even though I setup a test in= stance, same version, copy paste the config, and there I cannot replicate t= he issue, it works.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Other SFTP clients (filezila, winscp etc) do not have this error.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Would appreciate if someone can point me in the right direction to troubles= hoot this.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Below the error, and debugs, and config</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> #TurboFTP logs</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> TurboFTP 64-bit Version 7.10 Build 1573 - WinSock 2.0</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> =C2=A0Unregistered evaluation copy. The evaluation period will expire in 29= days.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Connecting to A.B.C.D Port 22 (try #1) ...</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Server version: SSH-2.0-Azets FTP</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> COMMAND:> Sent client version string 'SSH-2.0-TurboFTP_SSHM_2.680= 9;</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Crypto negotiation done, Server to client cipher:aes128-ctr, ma= c:hmac-sha2-256, compression:none.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Crypto negotiation done, Client to server cipher:aes128-ctr, ma= c:hmac-sha2-256, compression:none.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Key exchange done with ecdh-sha2-nistp256 and host key algo: rs= a-sha2-256</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Authenticating with method 'password'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Login successful.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ERROR:> unexp. packet type 95 in respond to SSH_MSG_CHANNEL_REQUEST (err= or #77)</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> STATUS:> Wait 10 seconds and try again...</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> #Proftpd config:</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ubuntu@FTP-PROD3:/opt/proftpd-sftp/etc$ cat proftpd.conf</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> DisplayConnect /opt/proftpd-sftp/etc/DisplayConnect</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> DisplayQuit /opt/proftpd-sftp/etc/DisplayQuit</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> DisplayLogin /opt/proftpd-sftp/etc/DisplayLogin</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ServerIdent on "Azets FTP"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ServerName "Azets File Transfer Server"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> UseReverseDNS off</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> MaxInstances =C2=A0 =C2=A01000</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> MaxClients 999 "Max Clients reached!"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> MaxClientsPerHost 50 "Max Clients per Host reached!"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> MaxClientsPerUser 50 "Max Client per User reached!"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> MaxLoginAttempts 3</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> TimeoutLogin =C2=A0 =C2=A0 =C2=A0120</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> TimeoutIdle =C2=A0 =C2=A0 =C2=A0 300</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> TimeoutNoTransfer 300</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> TimeoutStalled =C2=A0 =C2=A0300</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ServerType =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0standalone</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> DefaultServer =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 on</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> UseIPv6 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 off</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Umask =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 066 077</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> User =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0nobody</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Group =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 nogroup</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> DefaultRoot ~</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> AllowOverwrite =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0on</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> AuthOrder mod_sql.c</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLAuthenticate users</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLConnectInfo PROFTPD@dburl user pass</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLUserInfo USERS USER PASS UID GID DIR NULL</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLUserWhereClause "SFTP=3D1"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLAuthTypes Crypt</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLMinID 1999</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLDefaultGID 2000</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLLog PASS updatecount</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SQLNamedQuery updatecount UPDATE "COUNT=3DCOUNT+1,LAST=3Dnow() WHERE U= SER=3D'%u'" USERS</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> CreateHome on</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> WtmpLog off</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <IfModule mod_unique_id.c></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> LogFormat logformat "%{%Y-%m-%d %H:%M:%S}t.%{millisecs} %{UNIQUE_ID}e = %a %{remote-port} %u \"%r\" %s %S %bbytes %Tsec %{transfer-status= } %{transfer-type} %{protocol}"</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ExtendedLog /var/log/proftpd/sftp-extended.log AUTH,INFO,DIRS,READ,WRITE,MI= SC,SEC,EXIT logformat</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> </IfModule></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <IfModule mod_sftp.c></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Port 22</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SFTPEngine on</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SFTPHostKey /opt/proftpd-sftp/etc/sftp.azets.com.rsa.key</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SFTPHostKey /opt/proftpd-sftp/etc/sftp.azets.com.ecdsa.key</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SFTPAuthorizedUserKeys file:~/.sftp/authorized_keys</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> SFTPOptions IgnoreSFTPUploadPerms IgnoreSFTPSetOwners IgnoreSFTPSetPerms Ig= noreSFTPSetTimes</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> </IfModule></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <Limit SITE_CHMOD></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> =C2=A0 DenyAll</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> </Limit></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> #PROD session logs with debug level 10</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd <a href=3D"https://urldefense.com/v3/__http://172.18.128.117__;!!KF= YUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJq= Xbc_megAu4$" target=3D"_blank"> 172.18.128.117 [172.18.128.117]</a>: ROOT PRIVS at main.c:1327</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd <a href=3D"https://urldefense.com/v3/__http://172.18.128.117__;!!KF= YUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJq= Xbc_megAu4$" target=3D"_blank"> 172.18.128.117 [172.18.128.117]</a>: RELINQUISH PRIVS at main.c:1331</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd <a href=3D"https://urldefense.com/v3/__http://172.18.128.117__;!!KF= YUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJq= Xbc_megAu4$" target=3D"_blank"> 172.18.128.117 [172.18.128.117]</a>: no matching vhost found for 172.18.128= .117#22, using 'Azets File Transfer Server' listening on wildcard a= ddress</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at main.c= :1136</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SETUP PRIVS at main.= c:1141</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): session requested fr= om client in unknown class</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): performing module se= ssion initializations</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_unique_id/0.2: g= enerating unique session ID</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_unique_id/0.2: u= nique session ID is 'aFm4zqwSgHVaX+nEABOGqwi7'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at keys.c= :3644</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = keys.c:3651</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at keys.c= :1026</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = keys.c:1033</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at keys.c= :1026</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = keys.c:1033</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at keys.c= :3644</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = keys.c:3651</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_sql/4.5: default= ing to 'mysql' backend</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at mod_de= lay.c:2111</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = mod_delay.c:2114</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_log: opening Ext= endedLog '/var/log/proftpd/sftp-extended.log'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at mod_lo= g.c:1284</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = mod_log.c:1287</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at mod_au= th.c:215</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): opening scoreboard &= #39;/opt/proftpd-sftp/var/proftpd.scoreboard'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = mod_auth.c:217</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): AuthOrder in effect,= resetting auth module order</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): connected - local = =C2=A0: <a href=3D"https://urldefense.com/v3/__http://172.18.128.117:22__;!= !KFYUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrA= HJqXbcQl-o9Vs$" target=3D"_blank"> 172.18.128.117:22 [172.18.128.117]</a></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): connected - remote := <a href=3D"https://urldefense.com/v3/__http://90.95.233.196:40873__;!!KFYU= Deg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSLwoaIrAHJqXb= ceoM-eds$" target=3D"_blank"> 90.95.233.196:40873 [90.95.233.196]</a></div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SSH2 session opened.= </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'KEXINIT' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'KEXINIT' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'ECDH_INIT' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'ECDH_INIT' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'NEWKEYS' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'NEWKEYS' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'SERVICE_REQUEST' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'SERVICE_REQUEST' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'USER user1' to mod_core</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'USER user1' to mod_core</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'USER user1' to mod_delay</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'USER user1' to mod_auth</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'USER user1' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'USER user1' to mod_delay</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'USER user1' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'USER user1' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'USER user1' to mod_delay</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'PASS (hidden)' to mod_core</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'PASS (hidden)' to mod_core</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'PASS (hidden)' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'PASS (hidden)' to mod_delay</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching PRE_CMD = command 'PASS (hidden)' to mod_auth</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> precatel be removed in a future version.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): retrieved UID 2003 f= or user 'user1'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): retrieved UID 2003 f= or user 'user1'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at auth.c= :1774</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = auth.c:1777</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER PRIVS 2003 at a= uth.c:403</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = auth.c:405</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at mkhome= .c:326</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = mkhome.c:371</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]):</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Config for Azets Fil= e Transfer Server:</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Limit</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): =C2=A0DenyAll</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DisplayConnect</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DisplayQuit</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DisplayLogin</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ServerIdent</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxClients</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxClientsPerHost</d= iv> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxClientsPerUser</d= iv> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): MaxLoginAttempts</di= v> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutLogin</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutIdle</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutNoTransfer</d= iv> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): TimeoutStalled</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DefaultServer</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Umask</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DirUmask</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): UserID</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): UserName</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): GroupID</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): GroupName</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): DefaultRoot</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): AllowOverwrite</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): AuthOrder</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLAuthenticate</div= > <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLConnectInfo</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUserTable</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUsernameField</di= v> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLPasswordField</di= v> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUidField</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLGidField</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLHomedirField</div= > <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLUserWhereClause</= div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLAuthTypes</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLMinID</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLDefaultGID</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLLog_PASS</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SQLNamedQuery_update= count</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): CreateHome</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): WtmpLog</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): LogFormat</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ExtendedLog</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Port</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPEngine</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPHostKey</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPHostKey</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPAuthorizedUserKe= ys</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SFTPOptions</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at auth.c= :472</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): opening TransferLog = '/var/log/xferlog'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = auth.c:513</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER PRIVS 2003 at a= uth.c:166</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): retrieved UID 2003 f= or user 'user1'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = auth.c:171</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): set TZ environment v= ariable to 'UTC'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Preparing to chroot = to directory '/FTP/user1'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at auth.c= :1912</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = auth.c:1915</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): Environment successf= ully chroot()ed</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at auth.c= :547</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SETUP PRIVS at auth.= c:548</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at auth.c= :574</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): REVOKE PRIVS at auth= .c:575</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): changed directory to= '/'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): in dir_check_full():= path =3D '/', fullpath =3D '/FTP/user1/'</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): in dir_check_full():= setting umask to 0077 (was 0066)</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER user1: Login su= ccessful</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): user 'user1'= authenticated by mod_sql.c</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_sftp</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_delay</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_ls</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_auth</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RELINQUISH PRIVS at = mod_auth.c:2175</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): UseReverseDNS off, r= eturning IP address instead of DNS name</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS at mod_au= th.c:727</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): ROOT PRIVS: ID switc= hing disabled</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): REVOKE PRIVS at mod_= auth.c:728</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): REVOKE PRIVS: unable= to seteuid(): Operation not permitted</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): RootRevoke in effect= , dropped root privs</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_rlimit</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_xfer</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'PASS (hidden)' to mod_core</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'PASS (hidden)' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'PASS (hidden)' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'PASS (hidden)' to mod_delay</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'PASS (hidden)' to mod_auth</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): USER user1: Login su= ccessful.</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching POST_CMD= command 'USERAUTH_REQUEST user1 password' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'USERAUTH_REQUEST user1 password' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'USERAUTH_REQUEST user1 password' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'CHANNEL_OPEN session' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'CHANNEL_OPEN session' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'CHANNEL_REQUEST subsystem' to mod_sql</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): dispatching LOG_CMD = command 'CHANNEL_REQUEST subsystem' to mod_log</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): mod_sftp/1.1.1: scru= bbing 2 passphrases from memory</div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> proftpd 172.18.128.117 (90.95.233.196[90.95.233.196]): SSH2 session closed.= </div> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div id=3D"m_5387328796044047482x_m_4360181589103720487Signature"> <div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali= bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <p style=3D"margin-top:0px;margin-bottom:0px"><span style=3D"font-family:Ar= ial,sans-serif;font-size:9.75pt;color:black">Best regards,</span></p> <p style=3D"text-align:left;margin:0in 0in 0.0001pt"><span style=3D"font-fa= mily:Arial,sans-serif;font-size:9.75pt;color:black"><b>Cosmin Neagu</b></sp= an></p> <p style=3D"text-align:left;margin:0in 0in 0.0001pt"><span style=3D"font-fa= mily:Arial,sans-serif;font-size:10pt;color:black">Network Architect</span><= /p> <p style=3D"text-align:left;margin:0in 0in 0.0001pt"><span style=3D"font-fa= mily:Arial,sans-serif;font-size:10pt;color:black">Phone +40.744.625.033</sp= an></p> </div> </div> _______________________________________________<br> ProFTPD Users List=C2=A0 =C2=A0<<a href=3D"mailto:proftpd-users@proftpd.= org" target=3D"_blank">[email protected]</a>><br> Unsubscribe problems?<br> <a href=3D"https://urldefense.com/v3/__http://www.proftpd.org/list-unsub.ht= ml__;!!KFYUDeg!kkrWP_ub1fTArad2euI0WfNqb7mTV2IzsgkN8xB_ZdFVT-HzOnrJc9uI_RSL= woaIrAHJqXbcgtDqle8$" rel=3D"noreferrer" target=3D"_blank">http://www.proft= pd.org/list-unsub.html [proftpd.org]</a></div> </blockquote> </div> </div> </div> </div></blockquote></div> --00000000000025300e06385150e4-- --===============1506295353163466050== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============1506295353163466050== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html --===============1506295353163466050==--