vsftpd does not work on non-default ports [Solved]

Forum » Discussions / General » vsftpd does not work on non-default ports [Solved]

Started by:

RDF
Date: 18 Mar 2012 18:44
Number of posts: 3

RSS: New posts

Summary:

Changing the FTP-port from Tomato GUI makes vsftpd unaccessible

Unfold All Fold All More Options

Fold

vsftpd does not work on non-default ports

RDF 18 Mar 2012 18:44

I am trying to share my USB-disk to WAN with the default vsftpd that comes with Tomato. Enabling the server from the GUI https://192.168.1.1/nas-ftp.asp works fine. No problems at all.

However if I change the default port from 21 to something else (e.g. 21212) it stops working. Here's the output from /var/log/messages

Mar 18 19:21:28 unknown ftp.info vsftpd[7728]: [ftp] OK LOGIN: Client "X.X.X.X", anon password "cfnetwork@apple.com"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "230 Login successful."
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP command: Client "X.X.X.X", "SYST"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "215 UNIX Type: L8"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP command: Client "X.X.X.X", "PWD"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "257 "/""
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP command: Client "X.X.X.X", "TYPE I"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "200 Switching to Binary mode."
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP command: Client "X.X.X.X", "CWD /"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "250 Directory successfully changed."
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP command: Client "X.X.X.X", "PASV"
Mar 18 19:21:28 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "227 Entering Passive Mode."
Mar 18 19:21:29 unknown ftp.info vsftpd[7730]: [ftp] FTP command: Client "X.X.X.X", "LIST"
Mar 18 19:22:29 unknown ftp.info vsftpd[7730]: [ftp] FTP response: Client "X.X.X.X", "425 Failed to establish connection."

From the client's perspective it just stalls and nothing happens.

And for comparison here's a succesfull log when vsftpd is using the default 21 port:

Mar 18 19:17:02 unknown ftp.info vsftpd[2126]: [ftp] OK LOGIN: Client "X.X.X.X", anon password "cfnetwork@apple.com"
Mar 18 19:17:02 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "230 Login successful."
Mar 18 19:17:03 unknown ftp.info vsftpd[2128]: [ftp] FTP command: Client "X.X.X.X", "SYST"
Mar 18 19:17:03 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "215 UNIX Type: L8"
Mar 18 19:17:03 unknown ftp.info vsftpd[2128]: [ftp] FTP command: Client "X.X.X.X", "PWD"
Mar 18 19:17:03 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "257 "/""
Mar 18 19:17:04 unknown ftp.info vsftpd[2128]: [ftp] FTP command: Client "X.X.X.X", "TYPE I"
Mar 18 19:17:04 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "200 Switching to Binary mode."
Mar 18 19:17:04 unknown ftp.info vsftpd[2128]: [ftp] FTP command: Client "X.X.X.X", "CWD /"
Mar 18 19:17:04 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "250 Directory successfully changed."
Mar 18 19:17:04 unknown ftp.info vsftpd[2128]: [ftp] FTP command: Client "X.X.X.X", "PASV"
Mar 18 19:17:04 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "227 Entering Passive Mode."
Mar 18 19:17:05 unknown ftp.info vsftpd[2128]: [ftp] FTP command: Client "X.X.X.X", "LIST"
Mar 18 19:17:05 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "150 Here comes the directory listing."
Mar 18 19:17:06 unknown ftp.info vsftpd[2128]: [ftp] FTP response: Client "X.X.X.X", "226 Directory send OK."

How can it suddenly stop working if I just change the port??? Makes no sense.

I'm using:
Tomato Firmware v1.28.9054 MIPSR1-beta K26 USB Ext / Built on Tue, 30 Nov 2010 17:34:01 -0500

But I can also verify that
Tomato Firmware v1.28.9048 MIPSR1-beta18 K26 USB Ext / Built on Sun, 25 Jul 2010 10:24:48 -0400
has the same problem.

Last edited on 18 Mar 2012 19:06 by RDF Show more

Options

Unfold vsftpd does not work on non-default ports by

RDF, 18 Mar 2012 18:44

Fold

George Hafiz (guest) 21 Mar 2012 10:31

Hey.

I got mine working on a non-default port. I found that I had to specify the passive port range to use, though, otherwise it failed right after the client sends PASV.

I got mine to listen on 2100 and PASV range 2101-2110.

pasv_min_port=2101
pasv_max_port=2110

Try that, restart the router and let me know what happens.

Options

Unfold by

George Hafiz (guest), 21 Mar 2012 10:31

Fold

Re: vsftpd does not work on non-default ports

RDF 21 Mar 2012 19:02

Thanks for the reply George.
I tried to add the passive port range to the custom config, but it didn't work for me. Which version of Tomato USB are you using?
I think it's weird that we should tell the port range to vsftpd. All that should be handled by the nf_conntrack_ftp module, shouldn't it? Something seems to be broken in the GUI script for the FTP.

However after a bit of experimenting I got this working by doing the following steps:

1. Configure vsftpd from the GUI http://tomato/nas-ftp.asp with your custom FTP-port (e.g. 21212) and launch the server by clicking 'Save'. (Launching from the GUI creates /etc/vsftpd.conf which we will need later.)

2. Now kill vsftpd from the console:

# killall vsftpd

3. Unload all ftp related modules in this order (nf_conntrack_ftp can only be removed after nf_nat_ftp has been removed, I don't know what's the use of nf_nat_ftp):

# rmmod nf_nat_ftp
# rmmod nf_conntrack_ftp

4. Load nf_conntrack_ftp with the custom port you chose in the first step.

# modprobe nf_conntrack_ftp ports=21212

(4b. Load nf_nat_ftp. I have no idea what is the use of this module. Everything works fine for me even if I don't load this.

# modprobe nf_nat_ftp

)

5. Launch vsftpd from the console (I tried launching it from the GUI but it doesn't seem to work that way):

# vsftpd /etc/vsftpd.conf

6. IT WORKS!

Options

Unfold Re: vsftpd does not work on non-default ports by

RDF, 21 Mar 2012 19:02

New Post

TomatoUSB

Unleash your router