[Comm] [1/2 OFF] ProFTPD Solaris

Nick N. Vinogradov =?iso-8859-1?q?vinogradov_=CE=C1_dwellis=2Eru?=
Пн Апр 28 14:54:08 MSD 2003


Hi ALL !

Уважаемые! кто-нибудь может подсказать, где искать причину вот такого 
поведения ProFTPD:

oracle на nfs:~> ftp aaa.bbb.ccc.ddd
Connected to aaa.bbb.ccc.ddd.
220-[ Warning ! ]
220-[ Unauthorized access to this computer system is prohibited.  ]
220-[ All connections are logged. ]
220 FTP proxy [version 1.6.10] ready to service.
Name (aaa.bbb.ccc.ddd:oracle): oracle
331-[ 220 You are connected to aaa.bbb.ccc.ddd ]
331-[ 220 ProFTPD 1.2.8 Server (ProFTPD Default Installation) 
[www.some-host.ru] ]
331 Password required for oracle.
Password:
230 User oracle logged in.
ftp> pwd
257 "/export/home/oracle" is current directory.
ftp> ls -l
500 Syntax error, command unrecognized.
227 Enternig passive mode (192,168,13,1,160,16)
150 Opening ASCII mode data connection for file list
drwxr-xr-x  30 oracle   dba           512 Mar 19  2002 9.0.1
drwx------   5 oracle   dba           512 Feb 19 12:24 Maildir
drwxrwxr-x   3 oracle   dba           512 Mar 19  2002 jre
drwxrwxr-x  10 oracle   dba           512 Mar 19  2002 oraInventory
drwxrwxr-x   6 oracle   dba           512 Mar 19  2002 oui
drwxr-xr-x   2 root     other         512 Mar 20  2002 tmp
226 Transfer complete.
ftp> cd /
250 CWD command successful.
ftp> pwd
257 "/" is current directory.
ftp> ls -l
227 Enternig passive mode (192,168,13,1,160,51)
150 Opening ASCII mode data connection for file list

----- На этом месте подвисаем на несколько минут -----
----- Собственно это и есть вопрос -----

421 Service not available, remote server has closed connection.
ftp>

При этом, ls -l в любом другом каталоге (кроме /) отрабатывает нормально.


/usr/local/sbin>./proftpd -vv
  -          Version: 1.2.8 (stable)
  - Scoreboard Version: 01040001



/usr/local/sbin>cat /usr/local/etc/proftpd.conf
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName                      "ProFTPD Default Installation"
ServerType                      inetd
DefaultServer                   on

# Port 21 is the standard FTP port.
Port                            21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                           022


# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    30

# Set the user and group that the server normally runs at.
User                            nobody
Group                           nogroup

AllowStoreRestart       on

DeleteAbortedStores     on

<Directory /export/home/*>
     <Limit All Store Write Dele Cwd>
         AllowUser oracle,more-user
         Allow From aaa.bbb.ccc.ddd
         Allow From aaa.bbb.ccc.eee
         Allow From aaa.bbb.ccc.fff

         Deny from All
     </Limit>
</Directory>

# Normally, we want files to be overwriteable.
<Directory /*>
   AllowOverwrite                off
</Directory>

# A basic anonymous configuration, no upload directories.
<Anonymous ~ftp>
   User                          ftp
   Group                         ftp
   # We want clients to be able to login with "anonymous" as well as "ftp"
   UserAlias                     anonymous ftp

   # Limit the maximum number of anonymous logins
   MaxClients                    10

   # We want 'welcome.msg' displayed at login, and '.message' displayed
   # in each newly chdired directory.
   DisplayLogin                  welcome.msg
   DisplayFirstChdir             .message

   # Limit WRITE everywhere in the anonymous chroot
   <Limit WRITE>
     DenyAll
   </Limit>

</Anonymous>


Заранее спасибо.
WBR, Hash :-)







Подробная информация о списке рассылки community