云南龙网

  1. 首页 > 云知道 > >

proftp 1.2.9的基本安装手册( 八 )

云知道



the incoming connection. If these are blocked or excessively delayed a slower than normal login will result. To turn off DNS

and ident use:

UseReverseDNS off
IdentLookups off

IdentLookups and tcpwrappers ***

14. Lots of "FTP session closed" messages

Oct 7 12:30:48 salvage2 proftpd[8874]: FTP session closed. Oct 7 12:30:48 salvage2 proftpd[8874]: FTP session closed. Oct 7

12:30:48 salvage2 proftpd[8874]: FTP session closed. Oct 7 12:30:48 salvage2 proftpd[8874]: FTP session closed.

The above log extract is likely to be caused by a local monitoring system or a particularly aggressive DoS attack. Most

service monitoring systems try opening the ftp port on the target server to detect whether it is active and running. Most of

the time these tests are followed by an immediate "QUIT" or disconnection.

TCPdump/TCPshow on the server in question should show which machine on your network is is generating these connections.

15. How do I see who is connected?

The ftpwho command lists the state of each ftp connection to the server and what it"s current activity is. However this does

not detail the connection information on a virtual by virtual basis.

16. Can I force ProFTPD to listen on only one IP?

Sort, of it"s not quite as clean as the socket binding under Apache but the principle works something like this.

Standalone mode
To listen on the primary IP of a host use the SocketBindTight directive

To listen on a interfaces which are not the primary host interface use the SocketBindTight directive, place your server

configuration in a block and use "Port 0" for the main host configuration and and "Port 21"

inside the VirtualHost block.

inetd
There are two approaches possible, the first is to use the patch from Daniel Roesen (check the

mailing list archives).

The second method is to run ProFTPD from xinetd (http://synack.net/xinetd/), a more advanced replacement of inetd. An entry

for this in xinetd.conf would be something like this:

service ftp
{
disable = no
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/sbin/proftpd
log_on_success= DURATION USERID
log_on_failure= USERID
nice = 10
#bind = [IP to bind to]
}

17. "FTP server shut down ... please try again later."

Check for /etc/shutmsg and delete it.

18. How do I shutdown the server without killing proftpd?

ftpshut, allows the server to disallow connections with a message without actually taking down the service. The shutdown can

be scheduled for a point in the future or right now, existing connections can be allowed to finish, or be terminated now. Re

-enabling is done by removing the /etc/shutmsg file.

19. Is is possible to shutdown a single VirtualHost?

No, the shutmsg file works at a daemon level not at a virtual host level.

20. Error 421

This appears to be a general catch all error code meaning "something nasty has gone wrong".


Connection has timed out

The DefaultRoot specified doesn"t exist

The parent server has been killed

Check /etc/services

Wrong permissions on the DefaultRoot

You get the idea...

21. proftpd doesn"t show in the processlist

Two possible reasons, first that it"s simply not running, try proftpd -n -d2 to run in debug mode and see what happens. The

other is that it"s running from inetd and there are no active sessions at the moment.

22. How do I restart/reload the server?

This depends on the mode you"re running the server in.

inetd
Unless you"re making a configuration change to inetd itself nothing needs doing. The server reloads the configuration

everytime a new connection is made.

Standalone
Either stop and start the server completely (a little aggressive for most admins tastes) or send a SIGHUP to the master

推荐阅读


上一篇：梨的糖分含量高吗 梨的糖分含量高不高

下一篇：瓜子品种