thanks!
Corstian
Op vr 13-09-2002, om 04:30 schreef Mark Weaver:
David Stevenson wrote: > <big snip> > >>First you need to have an ftp server running on your >>linux box (you didn't say whether you did or not - so >>let's start with the obvious). If you DO, then you'll >>need to post more information on your settings, etc. >> > > <snip> > > Also check that the /etc/hosts.allow file has the IP address, if you are in > a secure environment then, ALL:ipddress would be ok. It would not hurt to > also put the ip in /etc/hosts. > > (replace ipaddress with the client ip) > > HTH > David > The most likely cause for this "connection refused" message is; 1) the ftp server isn't running 2) the port for the service isn't open 3) the connection attempt was seen as a hostile connection by portsentry and the ip address of the incoming connection has been blocked. To correct this do these things in this order: 1) check the status of the ftp service by issuing this command as root user: service <ftpservice-name> status [ENTER] ( in my case, I'm running Pureftpd the command would look like this: service pureftpd status [ENTER] ) a) if the service is running a pid number will be returned b) if it is not running the service name will be returned and it will tell you that the service is stopped c) if the service is stopped you can start it by issuing this command: service <ftpservice-name> start 2) once you're sure your ftp server is indeed running the next to check is that if port 21 is open. ( at this point I would also mention that if you're running a firewall, AND You should be!!! you will want to be certain that you've opened this port on the firewall). To check to see if your port is open check inside this file: /etc/services you should see a line in the file that appears like this: ftp 21/tcp a) if you find the line above appearing as it does in this example then port 21 is open - check with your firewall to further see about this port being open. b) if the above line appears like this: #ftp 21/tcp then the port is closed and you need to open it by removing the pound "#" sign from the beginning of the line thus opening the port for connections. 3) If you've checked with the first two and you're coming up empty then you need to check the /etc/hosts.deny file. By default Mandrake installs portsentry to the system and sets the process to run as -atcp & -audp. That means its checking everything. a) in the past I've noticed that Netscape Communicator would trip portsentry and the incoming connection would appear as a hostile connection attempt in much the same way that a port scan appears. It would therefore enter the offending connection's IP address into the /etc/hosts.deny file and create the appropriate iptables rule to block further connection attempts. b) cbeck /etc/hosts.deny for the IP address of the machine you're trying to connect to the ftp server from. if you find it there you can either comment it out with a "#" (pound sign) or you can remove it completely. let us know how you make out. Mark
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
