vsftpd

I have installed Open Suse 10.2 and am trying to set it up as a FTP server. I have followed the quick connect documents
from the open suse web site. I can connect to the ftp server using the local browser but when I try from an external
machine I receive 425 error. I have tried opening ftp and ports 20, 21 on the firewall but am missing something.

Thanks for the help

-MD

I turned off the firewall and was able to ftp into the server. What do I need to change in the firewall settings?
-MD


Mark D wrote:
> I have installed Open Suse 10.2 and am trying to set it up as a FTP
> server. I have followed the quick connect documents from the open suse
> web site. I can connect to the ftp server using the local browser but
> when I try from an external machine I receive 425 error. I have tried
> opening ftp and ports 20, 21 on the firewall but am missing something.
>
> Thanks for the help
>
> -MD

Mark,

try passive FTP.

Uwe

--
Novell Support Connection Volunteer SysOp
Please don't send me support related e-mail unless I ask you to do so.

I looked under Yast, firewall-allowed services-service to allow, and did not see an option for passive ftp.

-MD


Uwe Buckesfeld wrote:
> Mark,
>
> try passive FTP.
>
> Uwe
>

Mark D wrote:
> I looked under Yast, firewall-allowed services-service to allow, and did
> not see an option for passive ftp.
>
> -MD
>
>
> Uwe Buckesfeld wrote:
>> Mark,
>>
>> try passive FTP.
>>
>> Uwe
>>

In the advanced tab, you can add ftp, ftp-data (tcp)


/birger

I tried but did not succeed.

I have under Yast, firewall-allowed services-advanced
TCP Ports 20 21
UDP Ports
RPC Ports
IP Protocols ftp ftp-data

Any other ideas?

Thank you
-MD


Birger wrote:
> Mark D wrote:
>> I looked under Yast, firewall-allowed services-service to allow, and did
>> not see an option for passive ftp.
>>
>> -MD
>>
>>
>> Uwe Buckesfeld wrote:
>>> Mark,
>>>
>>> try passive FTP.
>>>
>>> Uwe
>>>
>
> In the advanced tab, you can add ftp, ftp-data (tcp)
>
>
> /birger

Mark D wrote:
> I have installed Open Suse 10.2 and am trying to set it up as a FTP
> server. I have followed the quick connect documents from the open suse
> web site. I can connect to the ftp server using the local browser but
> when I try from an external machine I receive 425 error. I have tried
> opening ftp and ports 20, 21 on the firewall but am missing something.
>
> Thanks for the help
>
> -MD

I am not at all sure if this would still apply in 10.2 but you might
check it out, fixed a similar problem in 10.0



It seems as if I can set an external zone for Remote Management, and
open a port for any other services in the external zone, but NOT for
FTP.

I have to STOP the firewall first then I can FTP, I know this is
probably the best, more secure way, but I'm curious as to what is the
best way to secure FTP, and Secure applications such as webmin from
the outside?


You need to flip the ALLOW_INCOMING_HIGHPORTS_TCP in
Yast>System>/etc/sysconfig Editor>Network>Firewall>SuSEfirewall2

You will get messages in your logs about this setting being deprecated
soon but until then it is the only way I could get ftp to work for me.


Hope that helps

--
Linux Websites Links http://myweb.cableone.net/okieman7/linux.htm

Mark,

I meant passive FTP on the client.

Uwe


--
Novell Support Connection Volunteer SysOp
Please don't send me support related e-mail unless I ask you to do so.

Thanks Jim that got me in.
I entered >1023 for the value which seams strange since ftp uses ports 20, 21.

-MD


Jim Jones wrote:
> Mark D wrote:
>> I have installed Open Suse 10.2 and am trying to set it up as a FTP
>> server. I have followed the quick connect documents from the open suse
>> web site. I can connect to the ftp server using the local browser but
>> when I try from an external machine I receive 425 error. I have tried
>> opening ftp and ports 20, 21 on the firewall but am missing something.
>>
>> Thanks for the help
>>
>> -MD
>
> I am not at all sure if this would still apply in 10.2 but you might
> check it out, fixed a similar problem in 10.0
>
>
>
> It seems as if I can set an external zone for Remote Management, and
> open a port for any other services in the external zone, but NOT for
> FTP.
>
> I have to STOP the firewall first then I can FTP, I know this is
> probably the best, more secure way, but I'm curious as to what is the
> best way to secure FTP, and Secure applications such as webmin from
> the outside?
>
>
> You need to flip the ALLOW_INCOMING_HIGHPORTS_TCP in
> Yast>System>/etc/sysconfig Editor>Network>Firewall>SuSEfirewall2
>
> You will get messages in your logs about this setting being deprecated
> soon but until then it is the only way I could get ftp to work for me.
>
>
> Hope that helps
>

Mark,

active FTP uses random high ports, hence my suggestion to use passive FTP.

Uwe

--
Novell Support Connection Volunteer SysOp
Please don't send me support related e-mail unless I ask you to do so.