proftp fails for anonymous as well as PAM authentication

Jeremy C. Reed plug-discuss@lists.plug.phoenix.az.us
Tue, 18 Feb 2003 15:51:07 -0800 (PST)


On Tue, 18 Feb 2003, Sundar wrote:

> 227 Entering Passive Mode (myhome,16,72).
> Cannot create a data connection: Connection refused
> Disconnecting from site myhome

> Feb 18 15:47:56 snoopy kernel: Packet log: input REJECT eth1 PROTO=6
> 144.15.255.

Check your packet filter rules.

Make sure your packet filter rules allows an outside connection to be made
to that (PASV) port assigned by the ftpd.

Configure your proftpd for what ports it will use for passive. For
example, in your proftpd.conf use the PassivePorts directive.

And then configure your packet filter to also accept incoming on those
ports (with SYN flag set).

Tell us more about your specific packet filter and maybe we can help more.

Good luck,

   Jeremy C. Reed
   http://bsd.reedmedia.net/