由 strong.net 在 04-29-2004 08:17 发表:
vsftpd外部登陆失败！帮帮手。。急！
我的vsftpd配置文件：
Example config file /etc/vsftpd.conf
The default compiled in settings are very paranoid. This sample file
loosens things up a bit, to make the ftp daemon more usable.
Allow anonymous FTP?
anonymous_enable=NO
Uncomment this to allow local users to log in.
local_enable=YES
Uncomment this to enable any form of FTP write command.
write_enable=YES
Default umask for local users is 077. You may wish to change this to 022,
if your users expect that (022 is used by most other ftpd's)
local_umask=022
Uncomment this to allow the anonymous FTP user to upload files. This only
has an effect if the above global write enable is activated. Also, you will
obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
Uncomment this if you want the anonymous FTP user to be able to create
new directories.
#anon_mkdir_write_enable=YES
Activate directory messages - messages given to remote users when they
go into a certain directory.
dirmessage_enable=YES
Activate logging of uploads/downloads.
xferlog_enable=YES
Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
If you want, you can arrange for uploaded anonymous files to be owned by
a different user. Note! Using "root" for uploaded files is not
recommended!
#chown_uploads=YES
#chown_username=whoever
You may override where the log file goes if you like. The default is shown
below.
#xferlog_file=/var/log/vsftpd.log
If you want, you can have your log file in standard ftpd xferlog format
xferlog_std_format=YES
You may change the default value for timing out an idle session.
#idle_session_timeout=600
You may change the default value for timing out a data connection.
#data_connection_timeout=120
It is recommended that you define on your system a unique user which the
ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftpsecure
Enable this and the server will recognise asynchronous ABOR requests. Not
recommended for security (the code is non-trivial). Not enabling it,
however, may confuse older FTP clients.
#async_abor_enable=YES
By default the server will pretend to allow ASCII mode but in fact ignore
the request. Turn on the below options to have the server actually do ASCII
mangling on files when in ASCII mode.
Beware that turning on ascii_download_enable enables malicious remote parties
to consume your I/O resources, by issuing the command "SIZE /big/file" in
ASCII mode.
These ASCII options are split into upload and download because you may wish
to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),
without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be
on the client anyway..
#ascii_upload_enable=YES
#ascii_download_enable=YES
You may fully customise the login banner string:
ftpd_banner=Welcome to Strong's FTP service.
You may specify a file of disallowed anonymous e-mail addresses. Apparently
useful for combatting certain DoS attacks.
#deny_email_enable=YES
(default follows)
#banned_email_file=/etc/vsftpd.banned_emails
You may specify an explicit list of local users to chroot() to their home
directory. If chroot_local_user is YES, then this list becomes a list of
users to NOT chroot().
chroot_list_enable=YES
(default follows)
chroot_list_file=/etc/vsftpd.chroot_list
You may activate the "-R" option to the builtin ls. This is disabled by
default to avoid remote users being able to cause excessive I/O on large
sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
the presence of the "-R" option, so there is a strong case for enabling it.
ls_recurse_enable=YES
pam_service_name=vsftpd
userlist_enable=YES
#enable for standalone mode
tcp_wrappers=YES
listen_port=110
listen=YES
登陆时出错！
*** CuteFTP Pro 6.0 - build Mar 25 2004 ***
STATUS:> Getting listing ""...
STATUS:> Resolving host name www.strongd.net...
STATUS:> Host name www.strongd.net resolved: ip = 218.14.55.83.
STATUS:> Connecting to FTP server www.strongd.net:110 (ip = 218.14.55.83)...
STATUS:> Socket connected. Waiting for welcome message...
220 Welcome to Strong's FTP service.
STATUS:> Connected. Authenticating...
COMMAND:> USER root
331 Please specify the password.
COMMAND:> PASS *****
230 Login successful.
STATUS:> Login successful.
COMMAND:> PWD
257 "/root"
STATUS:> Home directory: /root
COMMAND:> FEAT
500 Unknown command.
STATUS:> This site doesn't support the 'features' command.
COMMAND:> REST 100
350 Restart position accepted (100).
STATUS:> This site can resume broken downloads.
COMMAND:> REST 0
350 Restart position accepted (0).
COMMAND:> PASV
227 Entering Passive Mode (192,168,1,5,26,130)
COMMAND:> LIST
STATUS:> Connecting FTP data socket 192.168.1.5:6786...
ERROR:> The connection failed due to an error or timeout.
Verify that the destination IP address is correct.
Increase the connection timeout threshold under Global Settings | Connection.
Switch to the opposite data connection type (PASV or PORT) under Site Settings | Type tab.
Verify that the problem is not local by trying to connect to an alternate server.
If a server name was used, verify it resolves to the correct address.
If using a local server table for server name resolution, check to see that it doesn't resolve to an obsolete address.
Try pinging the address.
If you are using a router, verify the router is up and running (check by pinging it and then ping an address outside of the router).
Do a traceroute to the destination to verify all routers along the connection path are operational.
Verify that your subnet mask is setup properly.
Verify that your local software or hardware firewall is not blocking outbound connections originating from CuteFTP.
Verify that your anti-virus software is not at fault (try disabling it).
ERROR:> PASV failed, trying PORT.
STATUS:> Waiting 0 seconds...
STATUS:> Getting listing "/root"...
STATUS:> Resolving host name www.strongd.net...
STATUS:> Host name www.strongd.net resolved: ip = 218.14.55.83.
STATUS:> Connecting to FTP server www.strongd.net:110 (ip = 218.14.55.83)...
STATUS:> Socket connected. Waiting for welcome message...
220 Welcome to Strong's FTP service.
STATUS:> Connected. Authenticating...
COMMAND:> USER root
331 Please specify the password.
COMMAND:> PASS *****
230 Login successful.
STATUS:> Login successful.
COMMAND:> PWD
257 "/root"
STATUS:> Home directory: /root
STATUS:> This site doesn't support the 'features' command.
STATUS:> This site can resume broken downloads.
COMMAND:> REST 0
350 Restart position accepted (0).
COMMAND:> PORT 192,168,1,200,4,87
500 Illegal PORT command.
ERROR:> Syntax error, command unrecognized.
ERROR:> Failed to establish data socket.