aesthetic-zz/FTPtest.net Secret

## connected with coreftp
Connect socket #968 to 192.168.1.53, port 21...
220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
USER rl
331 Password required for rl
PASS **********
230 User rl logged in
SYST
215 UNIX Type: L8
Keep alive off...
PWD
257 "/home/rl" is the current directory
PASV
227 Entering Passive Mode (71,127,90,47,244,107).
LIST
Connect socket #1312 to 71.127.90.47, port 62571...
Reconnecting...
Connect socket #1312 to 192.168.1.53, port 21...
timeout
Connect socket #1320 to 192.168.1.53, port 21...
220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
USER rl
331 Password required for rl
PASS **********
230 User rl logged in
SYST
215 UNIX Type: L8
Keep alive off...
Attemping Active mode transfer...
PORT 192,168,1,54,64,62
200 PORT command successful
LIST
150 Opening ASCII mode data connection for file list
226 Transfer complete
Changed to ACTIVE mode...
Updated site profile...

## connected with filezilla
Status:	Connecting to 192.168.1.53:21...
Status:	Connection established, waiting for welcome message...
Response:	220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
Command:	USER rl
Response:	331 Password required for rl
Command:	PASS **********
Response:	230 User rl logged in
Command:	OPTS UTF8 ON
Response:	200 UTF8 set to on
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/home/rl" is the current directory
Command:	TYPE I
Response:	200 Type set to I
Command:	PORT 192,168,1,54,213,207
Response:	200 PORT command successful
Command:	MLSD
Response:	150 Opening ASCII mode data connection for MLSD
Response:	226 Transfer complete
Status:	Directory listing successful

## filezilla failure
Status:	Connecting to 192.168.1.53:21...
Status:	Connection established, waiting for welcome message...
Response:	220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
Command:	USER rl
Response:	331 Password required for rl
Command:	PASS **********
Response:	230 User rl logged in
Command:	OPTS UTF8 ON
Response:	200 UTF8 set to on
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/home/rl" is the current directory
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (71,127,90,47,222,145).
Command:	MLSD
Error:	Connection timed out
Error:	Failed to retrieve directory listing

## FTPtest.net
Test log
Status: Connecting to 71.127.90.47
Status: Connected, waiting for welcome message
Reply: 220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
Command: CLNT http://ftptest.net on behalf of 71.127.90.47
Reply: 500 CLNT not understood
Command: USER rl
Reply: 331 Password required for rl
Command: PASS **********
Reply: 230 User rl logged in
Command: SYST
Reply: 215 UNIX Type: L8
Command: FEAT
Error: Line feed received without preceding carriage return
Results
Error: Line feed received without preceding carriage return

    The replies sent by your server are violating the FTP specifications.
    You have to upgrade to a proper server.

## hangs on filezilla's config test
Connecting to probe.filezilla-project.org
Response: 220 FZ router and firewall tester ready
USER FileZilla
Response: 331 Give any password.
PASS 3.4.0
Response: 230 logged on.
Checking for correct external IP address
Retrieving external IP address from http://ip.filezilla-project.org/ip.php
Checking for correct external IP address
IP 71.127.90.47 hb-bch-ja-eh
Response: 200 OK
PREP 54712
Response: 200 Using port 54712, data token 1104892286
PORT 71,127,90,47,213,184
Response: 200 PORT command successful
LIST
Response: 150 opening data connection

## proftpd.conf
#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#

# Includes DSO modules
Include /etc/proftpd/modules.conf

# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
UseIPv6				on
# If set on you can experience a longer connection delay in many cases.
IdentLookups			off

ServerName			"eleutheros"
ServerType			standalone
DeferWelcome			off

MultilineRFC2228		on
DefaultServer			on
ShowSymlinks			on

TimeoutNoTransfer		600
TimeoutStalled			600
TimeoutIdle			1200

DisplayLogin                    welcome.msg
DisplayChdir               	.message true
ListOptions                	"-l"

DenyFilter			\*.*/

# Use this to jail all users in their homes
# DefaultRoot			~ !ftp-special

# Users require a valid shell listed in /etc/shells to login.
# Use this directive to release that constrain.
RequireValidShell		off

# Port 21 is the standard FTP port.
Port				21

# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.
PassivePorts                  49152 65534

# If your host was NATted, this option is useful in order to
# allow passive tranfers to work. You have to use your public
# address and opening the passive ports used on your firewall as well.
MasqueradeAddress		71.127.90.47

# This is useful for masquerading address with dynamic IPs:
# refresh any configured MasqueradeAddress directives every 8 hours
<IfModule mod_dynmasq.c>
# DynMasqRefresh 28800
</IfModule>

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances			30

# Set the user and group that the server normally runs at.
User				proftpd
Group				nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask				022  022
# Normally, we want files to be overwriteable.
AllowOverwrite			on

# Uncomment this if you are using NIS or LDAP via NSS to retrieve passwords:
# PersistentPasswd		off

# This is required to use both PAM-based authentication and local passwords
# AuthOrder			mod_auth_pam.c* mod_auth_unix.c

# Authentication using AuthUserFile
AuthUserFile                    /etc/proftpd/ftpd.passwd

# Be warned: use of this directive impacts CPU average load!
# Uncomment this if you like to see progress and transfer rate with ftpwho
# in downloads. That is not needed for uploads rates.
#
# UseSendFile			off

TransferLog /var/log/proftpd/xferlog
SystemLog   /var/log/proftpd/proftpd.log

<IfModule mod_quotatab.c>
QuotaEngine off
</IfModule>

<IfModule mod_ratio.c>
Ratios off
</IfModule>


# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default.
<IfModule mod_delay.c>
DelayEngine on
</IfModule>

<IfModule mod_ctrls.c>
ControlsEngine        off
ControlsMaxClients    2
ControlsLog           /var/log/proftpd/controls.log
ControlsInterval      5
ControlsSocket        /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
AdminControlsEngine off
</IfModule>

#
# Alternative authentication frameworks
#
#Include /etc/proftpd/ldap.conf
#Include /etc/proftpd/sql.conf

#
# This is used for FTPS connections
#
Include /etc/proftpd/tls.conf

# A basic anonymous configuration, no upload directories.

# <Anonymous ~ftp>
#   User				ftp
#   Group				nogroup
#   # We want clients to be able to login with "anonymous" as well as "ftp"
#   UserAlias			anonymous ftp
#   # Cosmetic changes, all files belongs to ftp user
#   DirFakeUser	on ftp
#   DirFakeGroup on ftp
#
#   RequireValidShell		off
#
#   # Limit the maximum number of anonymous logins
#   MaxClients			10
#
#   # We want 'welcome.msg' displayed at login, and '.message' displayed
#   # in each newly chdired directory.
#   DisplayLogin			welcome.msg
#   DisplayChdir		.message
#
#   # Limit WRITE everywhere in the anonymous chroot
#   <Directory *>
#     <Limit WRITE>
#       DenyAll
#     </Limit>
#   </Directory>
#
#   # Uncomment this if you're brave.
#   # <Directory incoming>
#   #   # Umask 022 is a good standard umask to prevent new files and dirs
#   #   # (second parm) from being group and world writable.
#   #   Umask				022  022
#   #            <Limit READ WRITE>
#   #            DenyAll
#   #            </Limit>
#   #            <Limit STOR>
#   #            AllowAll
#   #            </Limit>
#   # </Directory>
#
# </Anonymous>
	Connect socket #968 to 192.168.1.53, port 21...
	220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
	USER rl
	331 Password required for rl
	PASS **********
	230 User rl logged in
	SYST
	215 UNIX Type: L8
	Keep alive off...
	PWD
	257 "/home/rl" is the current directory
	PASV
	227 Entering Passive Mode (71,127,90,47,244,107).
	LIST
	Connect socket #1312 to 71.127.90.47, port 62571...
	Reconnecting...
	Connect socket #1312 to 192.168.1.53, port 21...
	timeout
	Connect socket #1320 to 192.168.1.53, port 21...
	220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
	USER rl
	331 Password required for rl
	PASS **********
	230 User rl logged in
	SYST
	215 UNIX Type: L8
	Keep alive off...
	Attemping Active mode transfer...
	PORT 192,168,1,54,64,62
	200 PORT command successful
	LIST
	150 Opening ASCII mode data connection for file list
	226 Transfer complete
	Changed to ACTIVE mode...
	Updated site profile...
	Status: Connecting to 192.168.1.53:21...
	Status: Connection established, waiting for welcome message...
	Response: 220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
	Command: USER rl
	Response: 331 Password required for rl
	Command: PASS **********
	Response: 230 User rl logged in
	Command: OPTS UTF8 ON
	Response: 200 UTF8 set to on
	Status: Connected
	Status: Retrieving directory listing...
	Command: PWD
	Response: 257 "/home/rl" is the current directory
	Command: TYPE I
	Response: 200 Type set to I
	Command: PORT 192,168,1,54,213,207
	Response: 200 PORT command successful
	Command: MLSD
	Response: 150 Opening ASCII mode data connection for MLSD
	Response: 226 Transfer complete
	Status: Directory listing successful
	Test log
	Status: Connecting to 71.127.90.47
	Status: Connected, waiting for welcome message
	Reply: 220 ProFTPD 1.3.2c Server (eleutheros) [71.127.90.47]
	Command: CLNT http://ftptest.net on behalf of 71.127.90.47
	Reply: 500 CLNT not understood
	Command: USER rl
	Reply: 331 Password required for rl
	Command: PASS **********
	Reply: 230 User rl logged in
	Command: SYST
	Reply: 215 UNIX Type: L8
	Command: FEAT
	Error: Line feed received without preceding carriage return
	Results
	Error: Line feed received without preceding carriage return

	The replies sent by your server are violating the FTP specifications.
	You have to upgrade to a proper server.
	Connecting to probe.filezilla-project.org
	Response: 220 FZ router and firewall tester ready
	USER FileZilla
	Response: 331 Give any password.
	PASS 3.4.0
	Response: 230 logged on.
	Checking for correct external IP address
	Retrieving external IP address from http://ip.filezilla-project.org/ip.php
	Checking for correct external IP address
	IP 71.127.90.47 hb-bch-ja-eh
	Response: 200 OK
	PREP 54712
	Response: 200 Using port 54712, data token 1104892286
	PORT 71,127,90,47,213,184
	Response: 200 PORT command successful
	LIST
	Response: 150 opening data connection
	#
	# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
	# To really apply changes reload proftpd after modifications.
	#

	# Includes DSO modules
	Include /etc/proftpd/modules.conf

	# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
	UseIPv6 on
	# If set on you can experience a longer connection delay in many cases.
	IdentLookups off

	ServerName "eleutheros"
	ServerType standalone
	DeferWelcome off

	MultilineRFC2228 on
	DefaultServer on
	ShowSymlinks on

	TimeoutNoTransfer 600
	TimeoutStalled 600
	TimeoutIdle 1200

	DisplayLogin welcome.msg
	DisplayChdir .message true
	ListOptions "-l"

	DenyFilter \./

	# Use this to jail all users in their homes
	# DefaultRoot ~ !ftp-special

	# Users require a valid shell listed in /etc/shells to login.
	# Use this directive to release that constrain.
	RequireValidShell off

	# Port 21 is the standard FTP port.
	Port 21

	# In some cases you have to specify passive ports range to by-pass
	# firewall limitations. Ephemeral ports can be used for that, but
	# feel free to use a more narrow range.
	PassivePorts 49152 65534

	# If your host was NATted, this option is useful in order to
	# allow passive tranfers to work. You have to use your public
	# address and opening the passive ports used on your firewall as well.
	MasqueradeAddress 71.127.90.47

	# This is useful for masquerading address with dynamic IPs:
	# refresh any configured MasqueradeAddress directives every 8 hours
	<IfModule mod_dynmasq.c>
	# DynMasqRefresh 28800
	</IfModule>

	# To prevent DoS attacks, set the maximum number of child processes
	# to 30. If you need to allow more than 30 concurrent connections
	# at once, simply increase this value. Note that this ONLY works
	# in standalone mode, in inetd mode you should use an inetd server
	# that allows you to limit maximum number of processes per service
	# (such as xinetd)
	MaxInstances 30

	# Set the user and group that the server normally runs at.
	User proftpd
	Group nogroup

	# Umask 022 is a good standard umask to prevent new files and dirs
	# (second parm) from being group and world writable.
	Umask 022 022
	# Normally, we want files to be overwriteable.
	AllowOverwrite on

	# Uncomment this if you are using NIS or LDAP via NSS to retrieve passwords:
	# PersistentPasswd off

	# This is required to use both PAM-based authentication and local passwords
	# AuthOrder mod_auth_pam.c* mod_auth_unix.c

	# Authentication using AuthUserFile
	AuthUserFile /etc/proftpd/ftpd.passwd

	# Be warned: use of this directive impacts CPU average load!
	# Uncomment this if you like to see progress and transfer rate with ftpwho
	# in downloads. That is not needed for uploads rates.
	#
	# UseSendFile off

	TransferLog /var/log/proftpd/xferlog
	SystemLog /var/log/proftpd/proftpd.log

	<IfModule mod_quotatab.c>
	QuotaEngine off
	</IfModule>

	<IfModule mod_ratio.c>
	Ratios off
	</IfModule>


	# Delay engine reduces impact of the so-called Timing Attack described in
	# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
	# It is on by default.
	<IfModule mod_delay.c>
	DelayEngine on
	</IfModule>

	<IfModule mod_ctrls.c>
	ControlsEngine off
	ControlsMaxClients 2
	ControlsLog /var/log/proftpd/controls.log
	ControlsInterval 5
	ControlsSocket /var/run/proftpd/proftpd.sock
	</IfModule>

	<IfModule mod_ctrls_admin.c>
	AdminControlsEngine off
	</IfModule>

	#
	# Alternative authentication frameworks
	#
	#Include /etc/proftpd/ldap.conf
	#Include /etc/proftpd/sql.conf

	#
	# This is used for FTPS connections
	#
	Include /etc/proftpd/tls.conf

	# A basic anonymous configuration, no upload directories.

	# <Anonymous ~ftp>
	# User ftp
	# Group nogroup
	# # We want clients to be able to login with "anonymous" as well as "ftp"
	# UserAlias anonymous ftp
	# # Cosmetic changes, all files belongs to ftp user
	# DirFakeUser on ftp
	# DirFakeGroup on ftp
	#
	# RequireValidShell off
	#
	# # Limit the maximum number of anonymous logins
	# MaxClients 10
	#
	# # We want 'welcome.msg' displayed at login, and '.message' displayed
	# # in each newly chdired directory.
	# DisplayLogin welcome.msg
	# DisplayChdir .message
	#
	# # Limit WRITE everywhere in the anonymous chroot
	# <Directory *>
	# <Limit WRITE>
	# DenyAll
	# </Limit>
	# </Directory>
	#
	# # Uncomment this if you're brave.
	# # <Directory incoming>
	# # # Umask 022 is a good standard umask to prevent new files and dirs
	# # # (second parm) from being group and world writable.
	# # Umask 022 022
	# # <Limit READ WRITE>
	# # DenyAll
	# # </Limit>
	# # <Limit STOR>
	# # AllowAll
	# # </Limit>
	# # </Directory>
	#
	# </Anonymous>