can not connect FTP

arlon · May 21, 2017

I can not access my ftp and error on initialing TLS, this is my pureftp log

[root@myserver user]# grep pure-ftpd /var/log/messages
May 21 04:39:49 myserver pure-ftpd: (?@169.54.244.82) [INFO] New connection from 169.54.244.82
May 21 04:39:49 myserver pure-ftpd: (?@169.54.244.82) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with RC4-SHA, 112 secret bits cipher
May 21 04:39:50 myserver pure-ftpd: (?@169.54.244.82) [INFO] Logout.
May 21 10:46:19 myserver pure-ftpd: (?@112.215.173.191) [INFO] New connection from 112.215.173.191
May 21 10:46:40 myserver pure-ftpd: (?@112.215.173.191) [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.
May 21 10:46:45 myserver pure-ftpd: (?@112.215.173.191) [INFO] New connection from 112.215.173.191
May 21 10:47:05 myserverpure-ftpd: (?@112.215.173.191) [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.
May 21 10:47:33 myserver pure-ftpd: (?@112.215.173.191) [INFO] New connection from 112.215.173.191
May 21 10:47:53 myserver pure-ftpd: (?@112.215.173.191) [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.
May 21 10:47:58 myserver pure-ftpd: (?@112.215.173.191) [INFO] New connection from 112.215.173.191
May 21 10:48:04 myserver pure-ftpd: (?@112.215.173.191) [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.
Click to expand...

and is my ftp hacked?

i dont recognize this IP

May 21 04:39:49 myserver pure-ftpd: (?@169.54.244.82) [INFO] New connection from 169.54.244.82
May 21 04:39:49 myserver pure-ftpd: (?@169.54.244.82) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with RC4-SHA, 112 secret bits cipher
May 21 04:39:50 myserver pure-ftpd: (?@169.54.244.82) [INFO] Logout.
Click to expand...

Update:
i can not connect sing filezilla on other computer but i still get error pn my laptop, i have reinstalled filezilla but still error

Please fill in any relevant information that applies to you:

CentOS Version: i.e. CentOS 6 64bit ?

Centmin Mod Version Installed: i.e. 123.08stable

Nginx Version Installed: i.e. 1.12.0

PHP Version Installed: i.e. 5.6.30

MariaDB MySQL Version Installed: i.e. 10.0.21

When was last time updated Centmin Mod code base ? today

Persistent Config: Do you have any persistent config file options set in /etc/centminmod/custom_config.inc ? You can check via this command:

cat /etc/centminmod/custom_config.inc

Post output in CODE tags.

eva2000 · May 21, 2017

May 21 10:47:53 myserver pure-ftpd: (?@112.215.173.191) [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.
Click to expand...

Did you make sure to enable explicit TLS/SSL mode and enable PASV passive mode like in 1st post here

Which FTP client ? As not all FTP clients support FTP explicit TLS/SSL mode only clients listed at bottom of this post.

Check if you're ISP IP address is being blocked by CSF Firewall. See FAQ items 40 & 41.

You can read up on pure-ftpd virtual ftp user setup at Pure-FTPD Virtual FTP Users

As such you need to set your FTP client to use FTP explicit SSL mode and enable and check Passive connections (PASV) and connect via your server's ip address for hostname and use FTP port 21 (not actually used in PASV mode with FTP TLS/SSL).

Click to expand...

You also have to disable in your FTP client SSL validation as a self-signed certificate was used.

Click to expand...

eva2000 · May 21, 2017

arlon said: ↑

and is my ftp hacked?

i dont recognize this IP
Click to expand...

ip belongs to softlayer https://tools.keycdn.com/geo?host=169.54.244.82

any clues ?

eva2000 · May 21, 2017

looks like portscanner https://www.abuseipdb.com/check/169.54.244.82 ??? did you let pure-ftpd generate a password or set your own ? how strong was username/password ?

arlon · May 21, 2017

eva2000 said: ↑

Did you make sure to enable explicit TLS/SSL mode and enable PASV passive mode like in 1st post here

Which FTP client ? As not all FTP clients support FTP explicit TLS/SSL mode only clients listed at bottom of this post.

Check if you're ISP IP address is being blocked by CSF Firewall. See FAQ items 40 & 41.

You can read up on pure-ftpd virtual ftp user setup at Pure-FTPD Virtual FTP Users
Click to expand...

i use filezilla and i have enabled FTP explicit TLS/SSL , passive mode as well
is my certificate expire? because i setup my server on february 2016, but i can login on other computer using filezilla

eva2000 · May 21, 2017

both computers on same local lan ? if you have vpn, connect to pure-ftpd via vpn on problematic pc to confirm if isp ip is blocked

See FAQ items 40 & 41 for details and clues.

if you still see

WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using SSL/TLS security mechanisms.
Click to expand...

then you haven't set FTP explicit TLS/SSL properly

arlon · May 21, 2017

i tried to connect ftp to cpanel server and failed too, i think the problem is in my computer,
but i have enabled tls on filezilla,

eva2000 · May 21, 2017

who's server web host ? see Pure-FTPD Virtual FTP Users - CentminMod.com LEMP Nginx web stack for CentOS

Other Firewalls

Note passive TCP ports in range between 3000 to 3050 for Centmin Mod 123.08stable or 30001 to 50011 for Centmin Mod 123.09 beta and higher are required to be open for Pure-ftpd server to accept connections. CSF Firewall installed by Centmin Mod takes care of this on server side.

However, if you have other firewalls between your connecting computer and the Centmin Mod server, they may block connections as well. Some web hosts such as Amazon AWS EC2, Google Cloud Compute, Vultr and OVH (OVH Gaming servers) may have their own firewall in front of your server which you can either turn off or configure to whitelist the required TCP ports. CSF Firewall config file /etc/csf/csf.conf has a list of default ports in comma separated listing that are whitelisted for variables TCP_IN, TCP_OUT, TCP6_IN, TCP6_OUT, UDP_IN, UDP_OUT, UDP6_IN and UDP6_OUT that you can reference. If your local PC or router has restricted ports, you may also need to whitelist them at that level as well.

For Vultr Firewall, there is a guide for using Vultr API to replicate CSF Firewall minimum ruleset for inbound access here.

Click to expand...

also if pc has own firewall, might need to open the passive port range too

Log in / Register

Forums

Want to subscribe to topics you're interested in?

can not connect FTP

arlon Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

arlon Member

eva2000 Administrator Staff Member

arlon Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

can not connect FTP

arlon Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

arlon Member

eva2000 Administrator Staff Member

arlon Member

eva2000 Administrator Staff Member

.