vsptpd virtual user can't log in except locally after port change
I have vsftpd running fine listening on the default port. I have virtual users configured to use PAM to authenticate passwords and chroot jailed into the home directory. All good.
I'd like to change the default port with listen_port=someport in the conf file. This almost works. After changing the default port I can log in on localhost at the terminal or using a browser pointing to localhost but on the LAN or WAN, the connection is refused.
Port forwarding isn't the problem. When I have the default ftp ports forwarded from the router it works fine listening on the default port 21. Seems like forwarding the new port should work but I get connection refused. The fact that it's refused, I think, must mean that the port is forwarded correctly and I'm getting a reply from vsftpd.
Here's my vsftpd.conf
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
nopriv_user=vsftpd
virtual_use_local_privs=YES
guest_enable=YES
user_sub_token=$USER
local_root=/var/www/$USER
chroot_local_user=YES
hide_ids=YES
guest_username=vsftpd
chroot_list_enable=YES
xferlog_enable=YES
xferlog_std_format=YES
xferlog_file=/var/log/vsftpd.log
Adding listen_port=whatever to this leaves me able to log on locally but not anywhere outside of my machine. I'm adding that one line and not changing or removing any others.
Any clues? Thanks for looking.
networking server ftp vsftpd
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
add a comment |
I have vsftpd running fine listening on the default port. I have virtual users configured to use PAM to authenticate passwords and chroot jailed into the home directory. All good.
I'd like to change the default port with listen_port=someport in the conf file. This almost works. After changing the default port I can log in on localhost at the terminal or using a browser pointing to localhost but on the LAN or WAN, the connection is refused.
Port forwarding isn't the problem. When I have the default ftp ports forwarded from the router it works fine listening on the default port 21. Seems like forwarding the new port should work but I get connection refused. The fact that it's refused, I think, must mean that the port is forwarded correctly and I'm getting a reply from vsftpd.
Here's my vsftpd.conf
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
nopriv_user=vsftpd
virtual_use_local_privs=YES
guest_enable=YES
user_sub_token=$USER
local_root=/var/www/$USER
chroot_local_user=YES
hide_ids=YES
guest_username=vsftpd
chroot_list_enable=YES
xferlog_enable=YES
xferlog_std_format=YES
xferlog_file=/var/log/vsftpd.log
Adding listen_port=whatever to this leaves me able to log on locally but not anywhere outside of my machine. I'm adding that one line and not changing or removing any others.
Any clues? Thanks for looking.
networking server ftp vsftpd
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
add a comment |
I have vsftpd running fine listening on the default port. I have virtual users configured to use PAM to authenticate passwords and chroot jailed into the home directory. All good.
I'd like to change the default port with listen_port=someport in the conf file. This almost works. After changing the default port I can log in on localhost at the terminal or using a browser pointing to localhost but on the LAN or WAN, the connection is refused.
Port forwarding isn't the problem. When I have the default ftp ports forwarded from the router it works fine listening on the default port 21. Seems like forwarding the new port should work but I get connection refused. The fact that it's refused, I think, must mean that the port is forwarded correctly and I'm getting a reply from vsftpd.
Here's my vsftpd.conf
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
nopriv_user=vsftpd
virtual_use_local_privs=YES
guest_enable=YES
user_sub_token=$USER
local_root=/var/www/$USER
chroot_local_user=YES
hide_ids=YES
guest_username=vsftpd
chroot_list_enable=YES
xferlog_enable=YES
xferlog_std_format=YES
xferlog_file=/var/log/vsftpd.log
Adding listen_port=whatever to this leaves me able to log on locally but not anywhere outside of my machine. I'm adding that one line and not changing or removing any others.
Any clues? Thanks for looking.
networking server ftp vsftpd
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
I have vsftpd running fine listening on the default port. I have virtual users configured to use PAM to authenticate passwords and chroot jailed into the home directory. All good.
I'd like to change the default port with listen_port=someport in the conf file. This almost works. After changing the default port I can log in on localhost at the terminal or using a browser pointing to localhost but on the LAN or WAN, the connection is refused.
Port forwarding isn't the problem. When I have the default ftp ports forwarded from the router it works fine listening on the default port 21. Seems like forwarding the new port should work but I get connection refused. The fact that it's refused, I think, must mean that the port is forwarded correctly and I'm getting a reply from vsftpd.
Here's my vsftpd.conf
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
nopriv_user=vsftpd
virtual_use_local_privs=YES
guest_enable=YES
user_sub_token=$USER
local_root=/var/www/$USER
chroot_local_user=YES
hide_ids=YES
guest_username=vsftpd
chroot_list_enable=YES
xferlog_enable=YES
xferlog_std_format=YES
xferlog_file=/var/log/vsftpd.log
Adding listen_port=whatever to this leaves me able to log on locally but not anywhere outside of my machine. I'm adding that one line and not changing or removing any others.
Any clues? Thanks for looking.
networking server ftp vsftpd
networking server ftp vsftpd
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
asked Mar 17 at 2:17
Twelve KanawTwelve Kanaw
12
12
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1126295%2fvsptpd-virtual-user-cant-log-in-except-locally-after-port-change%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1126295%2fvsptpd-virtual-user-cant-log-in-except-locally-after-port-change%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
