21번 포트는 열려있습니다. 그리고 proftpd도 가동 되어있는 것을
확인 했구요.. xinetd도 가동되어 있는 것을 확인했습니다.
다만 vmware상에서 ftp localhost하면 똑같은 현상 즉, remote host에
의해 잠겼다 라고 나옵니다. root계정이든 다른 계정이든 손
써볼 수 없
게 미리 그런 말들이 나온다는 애기죠.. 그리고 ipchains는 있는데
iptables는
init.d 밑에 없더군요.. 제가 알고 있는 모든 상식으로 검검을 다
해밨는데
안되더군요.. 참고로 네트웍이 안될 수 도 있다는 그런 말씀은
안해주셨음
합니다. 텔넷도 가능하고 역으로(vmware에서
xp)도 가능하니까 말이죠..
xp에서 ftp설정을 해줬거든요.. 문제는 vmware상의 ftp가 불가능
하다는 거죠.
이유를 모르겠습니다. 할꺼 다 해줬는데.. 제 추측으론 동적
아이피를 제가
임의로 할당해서 그런지 몰라도 서버주소를 신비로껄 쓰기
때문에 이런 현상이
생기는건 아닌가 해서요..무슨말인지
아시나요? 방화벽 등등의 것들 때문에..
그리고 성의있는 답변 감사합니다. 정말 멋있는 분이시네요..
이문제가 빨리 해결되었으면 좋겠습니다.
/etc/services#######################################################
# are included, only the more common ones.
#
# The latest IANA port assignments can be gotten from
# http://www.iana.org/assignments/port-numbers
# The Well Known Ports are those from 0 through 1023.
# The Registered Ports are those from 1024 through 49151
# The Dynamic and/or Private Ports are those from 49152 through 65535
#
# Each line describes one service, and is of the form:
#
# service-name port/protocol [aliases ...] [# comment]
tcpmux 1/tcp # TCP port service multiplexer
tcpmux 1/udp # TCP port service multiplexer
rje 5/tcp # Remote Job Entry
rje 5/udp # Remote Job Entry
echo 7/tcp
echo 7/udp
discard 9/tcp sink null
discard 9/udp sink null
systat 11/tcp users
systat 11/udp users
daytime 13/tcp
daytime 13/udp
qotd 17/tcp quote
qotd 17/udp quote
msp 18/tcp # message send protocol
msp 18/udp # message send protocol
chargen 19/tcp ttytst source
chargen 19/udp ttytst source
ftp-data 20/tcp
ftp-data 20/udp
# 21 is registered to ftp, but also used by fsp
ftp 21/tcp
ftp 21/udp fsp fspd
ssh 22/tcp # SSH Remote Login Protocol
ssh 22/udp # SSH Remote Login Protocol
telnet 23/tcp
telnet 23/udp
# 24 - private mail system
smtp 25/tcp mail
smtp 25/udp mail
time 37/tcp timserver
time 37/udp timserver
rlp 39/tcp resource # resource location
rlp 39/udp resource # resource location
nameserver 42/tcp name # IEN 116
nameserver 42/udp name # IEN 116
nicname 43/tcp whois
nicname 43/udp whois
tacacs 49/tcp # Login Host Protocol (TACACS)
tacacs 49/udp # Login Host Protocol (TACACS)
re-mail-ck 50/tcp # Remote Mail Checking Protocol
re-mail-ck 50/udp # Remote Mail Checking Protocol
"services" [readonly] 567L, 19891C 63,1
1%
#/etc/proftpd---ftpusers############################################################
#################3
#root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody
##/etc/proftpd--proftpd.conf############################################
# If u have any question, visit our Web Site. http://www.wowlinux.com
# or http://proftpd.oops.org
(ProFTPD korean user group)
# Thank you - WOWL!NUX.COM
ServerName "Proftpd FTP Server"
ServerType standalone
#ServerType inetd
DefaultServer on
Port 21
Umask 022
MaxInstances 30
User nobody
Group nobody
UseReverseDNS off
IdentLookups off
AuthPAMAuthoritative on
RootLogin off
DenyFilter \*.*/
DeferWelcome on
TimesGMT off
DefaultRoot ~
AllowOverwrite on
AllowRetrieveRestart on
AllowStoreRestart on
# RateReadBPS 256
# RateReadFreeBytes 5120
# RateReadHardBPS on
TimeoutIdle 0
TimeoutNoTransfer 0
TimeoutLogin 300
MaxClientsPerHost 2 "Only one client is allowed to connect"
DisplayLogin /etc/proftpd/welcome.msg
DisplayFirstChdir .message
<Directory /*>
AllowOverwrite on
</Directory>
<Anonymous ~ftp>
User ftp
Group ftp
UserAlias anonymous ftp
MaxClients 10 "Sorry, maxium users %m -- try again later"
MaxClientsPerHost 2 "Sorry, Over 2 connection not allow"
DisplayLogin welcome.msg
DisplayFirstChdir .message
RequireValidShell off
# HideUser root
"proftpd.conf" 87L, 1866C 56,1
6%
# HideGroup root
# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>
# Anonymous's Uploads Directory
<Directory incoming/*>
AllowOverwrite on
AllowRetrieveRestart on
AllowStoreRestart on
<Limit DELE STOR RMD MKD>
DenyAll
</Limit>
<Limit READ>
AllowAll
</Limit>
</Directory>
# Anonymous's Public Directory
<Directory pub/*>
<Limit READ>
AllowAll
</Limit>
<Limit STOR DELE RMD MKD>
DenyAll
</Limit>
</Directory>
</Anonymous>
"proftpd.conf" 87L, 186
#/etc/hosts.allow#################################################################
#
# hosts.allow This file describes the names of the hosts which are
# allowed to use the local INET services, as decided
# by the '/usr/sbin/tcpd' server.
#
#/etc/hosts.allow#########################################################]
#
# hosts.deny This file describes the names of the hosts which are
# *not* allowed to use the local INET services, as decided
# by the '/usr/sbin/tcpd' server.
#
# The portmap line is redundant, but it is left to remind you that
# the new secure portmap uses hosts.deny and hosts.allow. In particular
# you should know that NFS uses portmap!
##/etc/proftpd-xinetd.d-############################################################
###
# default: on
# description: The proftpd FTP server serves FTP connections. It uses \
# normal, unencrypted usernames and passwords for authentication.
service ftp
{
disable = no
flags = REUSE
protocol = tcp
socket_type = stream
instances = 50
wait = no
user = root
server = /usr/sbin/in.proftpd
log_on_success = HOST PID
log_on_failure = HOST RECORD
}
########[root@localhost root]# netstat -atnp################################
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
PID/Program name
tcp 0 0 0.0.0.0:1024 0.0.0.0:* LISTEN
759/rpc.statd
tcp 0 0 0.0.0.0:9098 0.0.0.0:* LISTEN
921/xinetd
tcp 0 0 0.0.0.0:9099 0.0.0.0:* LISTEN
921/xinetd
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
735/portmap
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN
1104/X
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN
921/xinetd
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
896/sshd
tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN
921/xinetd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
953/sendmail: accep
tcp 0 158 211.61.66.211:23 211.61.66.210:1097 ESTABLISHED
1789/in.telnetd: 21
######/etc/rc.d/proftpd########################################
#!/bin/sh
#
# Startup script for ProFTPd
#
# chkconfig: 345 85 15
# description: ProFTPD is an enhanced FTP server with \
# a focus toward simplicity, security, and ease of configuration. \
# It features a very Apache-like configuration syntax, \
# and a highly customizable server infrastructure, \
# including support for multiple 'virtual' FTP servers, \
# anonymous FTP, and permission-based directory visibility.
# processname: proftpd
# config: /etc/proftpd.conf
#
# By: Osman Elliyasa <osman@Cable.EU.org>
# $Id: proftpd.init.d,v 1.5 2002/05/18 14:59:56 jwm Exp $
# Source function library.
. /etc/rc.d/init.d/functions
if [ -f /etc/sysconfig/proftpd ]; then
. /etc/sysconfig/proftpd
fi
FTPSHUT=/usr/sbin/ftpshut
# See how we were called.
case "$1" in
start)
echo -n "Starting proftpd: "
daemon proftpd $OPTIONS
echo
touch /var/lock/subsys/proftpd
;;
stop)
echo -n "Shutting down proftpd: "
killproc proftpd
echo
rm -f /var/lock/subsys/proftpd
;;
status)
status proftpd
;;
restart)
$0 stop
$0 start
;;
reread)
echo -n "Re-reading proftpd config: "
killproc proftpd -HUP
echo
;;
suspend)
if [ -f $FTPSHUT ]; then
if [ $# -gt 1 ]; then
shift
echo -n "Suspending with '$*' "
$FTPSHUT $*
else
echo -n "Suspending NOW "
$FTPSHUT now "Maintanance in progress"
fi
else
echo -n "No way to suspend "
fi
echo
;;
resume)
if [ -f /etc/shutmsg ]; then
echo -n "Allowing sessions again "
rm -f /etc/shutmsg
else
echo -n "Was not suspended "
fi
echo
;;
*)
echo -n "Usage: $0 {start|stop|restart|status|reread|resume"
if [ "$FTPSHUT" = "" ]; then
echo "}"
else
echo "|suspend}"
echo "suspend accepts additional arguments which are passed to
ftpshut(8)"
fi
exit 1
esac
if [ $# -gt 1 ]; then
shift
$0 $*
fi
exit 0
#######/etc/rc.d/xinetd################################################
#!/bin/bash
#
# xinetd This starts and stops xinetd.
#
# chkconfig: 345 56 50
# description: xinetd is a powerful replacement for inetd. \
# xinetd has access control machanisms, extensive \
# logging capabilities, the ability to make services \
# available based on time, and can place \
# limits on the number of servers that can be started, \
# among other things.
#
# processname: /usr/sbin/xinetd
# config: /etc/sysconfig/network
# config: /etc/xinetd.conf
# pidfile: /var/run/xinetd.pid
PATH=/sbin:/bin:/usr/bin:/usr/sbin
# Source function library.
. /etc/init.d/functions
# Get config.
test -f /etc/sysconfig/network && . /etc/sysconfig/network
# More config
test -f /etc/sysconfig/xinetd && . /etc/sysconfig/xinetd
# Check that networking is up.
[ ${NETWORKING} = "yes" ] || exit 0
[ -f /usr/sbin/xinetd ] || exit 1
[ -f /etc/xinetd.conf ] || exit 1
RETVAL=0
if [ "$NETWORKING_IPV6" = "yes" ] && [ -x /usr/sbin/xinetd-ipv6
]; then
prog="xinetd-ipv6"
else
prog="xinetd"
fi
start(){
echo -n $"Starting $prog: "
# Need to get rid of localization for external services -
# it doesn't make much sense to have i18n on the server side here
LANG=en_US
LC_TIME=en_US
LC_ALL=en_US
LC_MESSAGES=en_US
LC_NUMERIC=en_US
LC_MONETARY=en_US
LC_COLLATE=en_US
export LANG LC_TIME LC_ALL LC_MESSAGES LC_NUMERIC LC_MONETARY LC_COLLATE
unset HOME MAIL USER USERNAME
daemon $prog -stayalive -reuse -pidfile /var/run/xinetd.pid
"$EXTRAOPTIONS"
RETVAL=$?
echo
touch /var/lock/subsys/xinetd
return $RETVAL
}
stop(){
echo -n $"Stopping $prog: "
killproc $prog
RETVAL=$?
echo
rm -f /var/lock/subsys/xinetd
return $RETVAL
}
reload(){
echo -n $"Reloading configuration: "
killproc $prog -HUP
RETVAL=$?
echo
return $RETVAL
}
restart(){
stop
start
}
condrestart(){
[ -e /var/lock/subsys/xinetd ] && restart
return 0
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
status)
status $prog
;;
restart)
restart
;;
reload)
reload
;;
condrestart)
condrestart
;;
*)
echo $"Usage: $0 {start|stop|status|restart|condrestart|reload}"
RETVAL=1
esac
exit $RETVAL
###/etc/log.d/conf/logfiles/
xferlog.conf#############################################
##########################################################################
# $Id: xferlog.conf,v 1.8 2002/03/29 15:30:28 kirk Exp $
##########################################################################
########################################################
# This was written and is maintained by:
# Kirk Bauer <kirk@kaybee.org>
#
# Please send all comments, suggestions, bug reports,
# etc, to kirk@kaybee.org.
#
########################################################
# What actual file? Defaults to LogPath if not absolute path....
LogFile = xferlog
# If the archives are searched, here is one or more line
# (optionally containing wildcards) that tell where they are...
# Note: if these are gzipped, you need to end with a .gz even if
# you use wildcards...
Archive = xferlog.*
Archive = xferlog.*.gz
[산이]님이 남기신 글:
>
>[김형준]님이 남기신 글:
>
>>형준: 그렇게 말씀하시면 잘 모릅니다. 바도 무슨 소리인지
모르겠고..
>> 어떻게 되는 내용인지.. 그리고 FM은 어떤것인지 말씀을
>> 해주시면 안될까요?
>>
>
>음... 제가봐도 제 답변이 좀 무성의한 답변이군요....T.T
>
>결론부터 말하자면 vmware 에 올린 리눅스 FTPd 데몬이
안떠
>있거나 또는 설정이 잘못되어 있거나 아니면 접속을 모두
차단하는
>경우입니다.
>
>이것을 하나하나씩 점검해야 하는데 초보자가 하기엔 좀
벅차군요..
>잘모르니깐 처음에 모두 root 로 작업하세요.
>
>1. FTPd 데몬 가동여부
>
>shell> netstat -atnp
>
>로 해서 21번 포트에 LISTEN 이 있는지 확인하세요.
>아니면 위의 내용을 그대로 포스팅해주세요.
>
>만약 안떠 있다면 FTPd 를 가동해야 하는데 파란R2 라면
아면
>ProFTPd 일겁니다.
>
>다음과 같이 데몬을 가동하세요.
>
>shell> /etc/rc.d/init.d/proftpd start
>
>위의 과정 다시 확인
>
>혹시 xinetd 로 가동하는 경우도 있으므로
>우선 1번과 같이 해보세요.
>
>2. localhost 에서 자신의 FTPd 로 접속해 봄
>
>shell> ftp localhost
>
>유저 이름에 root 가 아닌 다른 계정을 입력하고
암호를
>넣고 접속을 시도해봄.
>
>3. XP 에서 2번 과정을 테스트해봄
>
>만약 2번은 되는데 3번은 안되는 경우가 있는데
이것은
>방화벽 또는 TCP wrapper 또는 ProFTPd 설정에서
막혀있다는
>의미입니다.
>
>shell> /etc/rc.d/init.d/ipchains stop
>shell> /etc/rc.d/init.d/iptables stop
>
>이 경우라면 /etc/proftpd/proftpd.conf
>또는 /etc/proftpd.conf 파일을 긁어서 올리세요.
>그리고 /etc/hosts.allow, /etc/hosts.deny 도 함께
>
>여기까지 하나씩 해보시고 안되는 부분부터 다시 질문해
주세요.
>
>>
>>
>>
>>[산이]님이 남기신 글:
>>
>>>
>>>[김형준]님이
남기신 글:
>>>
>>>>-----------------------------------------
>>>>답변자가 기본적으로 참고할 내용입니다.
>>>>- 배포판(옵션) :
>>>>- 커널버전(옵션)
:
>>>>- 데몬버전(예:apache
1.3.27) :
>>>>- 데몬설치유형(RPM/컴파일/기타)
:
>>>>-----------------------------------------
>>>>제 운영체제는 xp이구요 , 동적아이피를
사용합니다.
>>>>vmware로 리눅스를 깔았구요.. xp 상에서 도스창을 열고 파란
r2리눅스
>>>>를 연결하려고 하면 remote host에 의해서 close되었다고만
나옵니다.
>>>>참고로 텔넷은 연결했거든요..
>>>>반대로 vmware상에서 xp로의 ftp연결은 또 가능하더라구요..
>>>>결론은 xp상에서 vmware의 리눅스로 ftp 연결이 안된다는
말입니다.
>>>>
>>>>방법이 없을까요? 무척 궁금하고 답답합니다. 답변
부탁드립니다.
>>>
>>>========================================
>>>
>>>vmware 의 ProFTP 로그를 확인해 보세요.
>>>/var/log 쪽의 xferlog 아니면 proftpd.log 입니다.
>>
>>========================================
>
>========================================
========================================
|