+ Reply to Thread
Results 1 to 5 of 5

Thread: vsftpd from behind firewall

  1. 07-23-2007 07:03 PM #1
    JoeyJoeJoe
    JoeyJoeJoe is offline
      Junior Member JoeyJoeJoe
    Join Date
    Nov 2006
    Posts
    84

    vsftpd from behind firewall

    I have configured vsftpd to work on my local network at home but would like to poke a hole in my router’s firewall so that I can upload files to it from anywhere.

    I have already disabled anonymous connections, but would like to, if possible, encrypt username/password when I log in.

    Is this possible? Where do I start?

    Thanks,
    JJJ
    Reply With Quote Reply With Quote  
  2. 07-23-2007 08:00 PM #2
    redhead
    redhead is offline
      Advisor redhead redhead's Avatar
    Join Date
    Jun 2001
    Location
    Copenhagen, Denmark
    Posts
    756
    ssl_enable=YES
    force_local_logins_ssl=YES
    Don’t worry Ma’am. We’re university students, – We know what We’re doing.
    ‘Ruiat coelum, fiat voluntas tua.’
    Datalogi – en livsstil; Intet liv, ingen stil.
    Reply With Quote Reply With Quote  
  3. 07-24-2007 03:26 AM #3
    JoeyJoeJoe
    JoeyJoeJoe is offline
      Junior Member JoeyJoeJoe
    Join Date
    Nov 2006
    Posts
    84
    I would’ve found that had I read the sample .conf files. Thanks.

    But how do I generate keys?

    This link looked promising, but /etc/pki/tls/certs does not exist on my server.

    The results of ldd /usr/sbin/vsftpd | grep ssl show that I can support TLS/SSL, correct?

    libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0xb7f06000)
    Reply With Quote Reply With Quote  
  4. 07-24-2007 04:28 AM #4
    JoeyJoeJoe
    JoeyJoeJoe is offline
      Junior Member JoeyJoeJoe
    Join Date
    Nov 2006
    Posts
    84
    It works, as is.

    I can just go ahead and use the snakeoil.pem certificate that was generated automatically. When was this key generated? I assume it is unique to my installation of Ubuntu server, yes?
    Reply With Quote Reply With Quote  
  5. 07-24-2007 04:52 PM #5
    JoeyJoeJoe
    JoeyJoeJoe is offline
      Junior Member JoeyJoeJoe
    Join Date
    Nov 2006
    Posts
    84
    Kind of off-topic question:

    I installed FileZilla on my XP box at work and while I can hit my FTP server and even authenticate to it using FTP over SSL (explicit encryption) and passive mode for transfer, I am unable to to retrieve directory listing:

    Error: Transfer channel can’t be opened. Reason: A socket operation was attempted to an unreachable host.
    Error: Could not retrieve directory listing
    I work at a university and we have an entire class A subnet so I’m not NAT’ing at least to my (limited) understanding so that’s not it.

    Clearly it is communicating out and authenticating me but it still cannot list the remote directory on my server.
    Reply With Quote Reply With Quote  
+ Reply to Thread
« Previous Thread | Next Thread »

Similar Threads

  1. Viruses, Worms, Trojan Horses
    By CoolJsa14 in forum Windows – General Topics
    Replies: 9
    Last Post: 11-01-2009, 08:08 AM
  2. Running cusom firewall script -iptables -RHEL 4
    By sud.tech in forum Programming
    Replies: 0
    Last Post: 06-12-2008, 02:09 PM
  3. Firewall script in RHEL 4
    By sud.tech in forum Programming
    Replies: 8
    Last Post: 06-12-2008, 02:07 PM
  4. Firewall Security Tutorial
    By Waka-Gashira in forum Windows – General Topics
    Replies: 6
    Last Post: 07-02-2007, 10:15 AM
  5. vsftpd : cannot login with non-anonymous user …
    By debellez in forum Linux – Hardware, Networking & Security
    Replies: 8
    Last Post: 05-10-2006, 08:12 PM

Bookmarks

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Forum Rules