Hi Peoples,
I'm still beating my head with the Proftpd although I have solved my orininal issue. That turned out to be an iptables issue and I'm beginning to wonder if iptables is playing with me again. I have an FTP server that allows anonymous downloads and with specific accounts able to upload to the anonymous directory. The problem is, those users cannot upload. I have attached my proftpd conf file and my iptables for those willing to take a look and provide some feedback:
Thanks for any feedback.
Iptables:
#!/bin/bash
# Make sure modules are loaded insmod ip_tables insmod ip_conntrack insmod ip_conntrack_ftp insmod ipt_state
# Flush any existing rules iptables -F
# Block x.x.x.x/x.x.x.x iptables -A INPUT -s 194.150.236.171 -j DROP iptables -A INPUT -s 213.193.230.2 -j DROP iptables -A INPUT -s 205.134.230.2 -j DROP iptables -A INPUT -s 201.15.13.42 -j DROP iptables -A INPUT -s 61.100.12.125 -j DROP iptables -A INPUT -s 193.136.200.48 -j DROP iptables -A INPUT -s 61.218.41.152 -j DROP iptables -A INPUT -s 61.183.22.0/24 -j DROP iptables -A INPUT -s 80.228.206.0/24 -j DROP iptables -A INPUT -s 67.94.106.0/24 -j DROP
# Allow other traffic # iptables -A INPUT -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 20 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
iptables -A INPUT -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -p tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT iptables -A OUTPUT -p tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A OUTPUT -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
#Drop all other traffic #iptables -A INPUT -j DROP
Proftpd conf:
AuthPAMAuthoritative on IdentLookups off UseReverseDNS off Port 21 Umask 022 ListOptions "-a" AllowRetrieveRestart on AllowStoreRestart on MaxInstances 20 User nobody Group nobody ScoreboardFile /var/run/proftpd.score
<Global> AllowOverwrite yes <Limit ALL SITE_CHMOD> AllowAll </Limit> </Global> LogFormat default "%h %l %u %t "%r" %s %b" LogFormat auth "%v [%P] %h %t "%r" %s" TransferLog /var/log/proftpd/xferlog ExtendedLog /var/log/proftpd/access.log WRITE,READ ExtendedLog /var/log/proftpd/auth.log AUTH auth
UseFTPUsers off
<Anonymous /var/ftp/pub> AnonRequirePassword on User gps Group gps #DefaultChdir /var/ftp/pub/ RequireValidShell off <Limit STOR> AllowAll </Limit> <Limit WRITE> AllowAll </Limit> </Anonymous>
<Anonymous ~ftp> User ftp Group ftp AccessGrantMsg "Anonymous login ok, restrictions apply." UserAlias anonymous ftp DefaultChdir /pub/ RequireValidShell off AnonRequirePassword off <Limit LOGIN> AllowAll </Limit> <Limit WRITE> DenyAll </Limit> <Limit STOR> DenyAll </Limit> <Limit READ> AllowAll </Limit> </Anonymous>