Re: pure_ftpd other option(style) not work

2013-09-25 Thread Stuart Henderson
On 2013-09-24, =?ISO-8859-1?B?RnVuZw==?= fungm...@qq.com wrote:

 if  add other flags like -o, for example , change  /etc/rc.d/pure_ftpd  
 
 -daemon_flags=-A -B -H -u1000
 +daemon_flags=-o -A -B -H -u1000

Don't do this. Set pure_ftpd_flags=... in /etc/rc.conf.local instead.



Re: pure_ftpd other option(style) not work

2013-09-24 Thread James Griffin
* Brad Smith b...@comstyle.com [2013-09-24 00:43:44 -0400]:

 On 23/09/13 11:07 PM, Fung wrote:
 in current snapshots
 
 install pure_ftpd
 
 default /etc/rc.d/pure_ftpd is
 ---
 #!/bin/sh
 #
 # $OpenBSD: pure_ftpd.rc,v 1.1 2011/04/25 09:26:47 sthen Exp $
 
 daemon=/usr/local/sbin/pure-ftpd
 daemon_flags=-A -B -H -u1000
 
 . /etc/rc.d/rc.subr
 
 pexp=pure-ftpd: -pure-ftpd \(SERVER\)
 rc_reload=NO
 
 rc_cmd $1
 --
 
 # /etc/rc.d/pure_ftpd start
 
 # ps -auwx | grep ftpd
 root  8530  0.0  0.0   852  1264 ??  Is10:44AM0:00.00 pure-ftpd: 
 -pure-ftpd (SERVER) (pure-ftpd)
 
 now user login work
 
 if  add other flags like -o, for example , change  /etc/rc.d/pure_ftpd
 
 -daemon_flags=-A -B -H -u1000
 +daemon_flags=-o -A -B -H -u1000
 
 
 the daemon will start but nobody can login!
 
 # pkill ftpd
 # /etc/rc.d/pure_ftpd start
 pure_ftpd(ok)
 
 
 # ps -auwx | grep ftpd
 root 15587  0.0  0.0   676   964 ??  Is10:48AM0:00.00 
 /usr/local/sbin/pure-ftpd -o -A -B -H -u1000
 
 
 # ftp localhost
 Trying 127.0.0.1...
 ftp: connect to address 127.0.0.1: Connection refused
 Trying ::1...
 ftp: connect: Connection refused
 ftp
 
 
 BTW, start pure-ftpd without rc.d script not work too
 
 # pkill ftpd
 # /usr/local/sbin/pure-ftpd -A -B -H -u1000 -o
 # ftp localhost
 Trying 127.0.0.1...
 ftp: connect to address 127.0.0.1: Connection refused
 Trying ::1...
 ftp: connect: Connection refused
 ftp
 
 
 
 
 
 
 # sysctl kern.version
 kern.version=OpenBSD 5.4-current (GENERIC) #55: Tue Sep 17 08:29:11 MDT 2013
  t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
 
 # pkg_info | grep pure
 pure-ftpd-1.0.36p2-virtual_chroot small, easy to set up, fast and very 
 secure FTP server
 
 The pure-ftpd package works fine out of the box with either the rc.d
 script or manually running the equivalent binary and command line
 parameters. There is something you have done on your system to cause
 it to not work. Does fstat show the sockets created by pure-ftpd
 once it has been started up? Are you running a modified PF rule set?

I think pf.conf would be a good place to start too.



Re: pure_ftpd other option(style) not work

2013-09-24 Thread Fung
today test pure-ftpd again in a fress install 

pf.conf is default, not touch anything in system
pure_ftpd other option(style) not work!


login as: root
root@10.0.0.163's password:
Last login: Tue Sep 24 17:42:39 2013 from 10.0.0.88
OpenBSD 5.4-current (GENERIC.MP) #61: Mon Sep 23 15:44:45 MDT 2013

Welcome to OpenBSD: The proactively secure Unix-like operating system.

Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code.  With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.

# cd /root
# vi .profile
# . /root/.profile

# pkg_add pure-ftpd
Ambiguous: choose package for pure-ftpd
 a   0: None
 1: pure-ftpd-1.0.36p2
 2: pure-ftpd-1.0.36p2-ldap
 3: pure-ftpd-1.0.36p2-ldap-virtual_chroot
 4: pure-ftpd-1.0.36p2-mysql
 5: pure-ftpd-1.0.36p2-mysql-virtual_chroot
 6: pure-ftpd-1.0.36p2-postgresql
 7: pure-ftpd-1.0.36p2-postgresql-virtual_chroot
 8: pure-ftpd-1.0.36p2-virtual_chroot
Your choice: 8
pure-ftpd-1.0.36p2-virtual_...:libiconv-1.14p0: ok
pure-ftpd-1.0.36p2-virtual_chroot: ok
The following new rcscripts were installed: /etc/rc.d/pure_ftpd
See rc.d(8) for details.


Just found a interesting thing  
/etc/rc.d/pure_ftpd is in bin group but all other scripts in rc.d in wheel 
group ?

# ls -l /etc/rc.d/pure_ftpd
-r-xr-xr-x  1 root  bin 228 Sep 20 22:36 pure_ftpd



# /etc/rc.d/pure_ftpd start
pure_ftpd(ok)

# ps -auwx | grep ftpd
root 30359  0.0  0.0   788  1292 ??  Ss 9:31AM0:00.00 pure-ftpd: 
-pu   re-ftpd (SERVER) 
(pure-ftpd)
root 23216  0.0  0.0   448   904 p0  S+ 9:31AM0:00.00 grep ftpd

# ftp localhost
Trying 127.0.0.1...
Connected to localhost.
220-- Welcome to Pure-FTPd [privsep] [TLS] --
220-You are user number 1 of 50 allowed.
220-Local time is now 09:32. Server port: 21.
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
Name (localhost:root): ^C#


# vi /etc/rc.d/pure_ftpd#

# /etc/rc.d/pure_ftpd stop
pure_ftpd(ok)

# ps -auwx | grep ftpd
root 15167  0.0  0.0   244   252 p0  R+/1   9:33AM0:00.00 grep ftpd

# /etc/rc.d/pure_ftpd start
pure_ftpd(ok)

# ps -auwx | grep ftpd
root 11999  0.0  0.0   716   980 ??  Ss 9:33AM0:00.00 
/usr/local/sbin/pure-ftpd -o -A -B -H -u1000
root 21498  0.0  0.0   252   224 p0  R+/1   9:33AM0:00.00 grep ftpd

# ftp localhost
Trying 127.0.0.1...
ftp: connect to address 127.0.0.1: Connection refused
Trying ::1...
ftp: connect: Connection refused
ftp exit

# sysctl kern.version
kern.version=OpenBSD 5.4-current (GENERIC.MP) #61: Mon Sep 23 15:44:45 MDT 2013
t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

# pkg_info
athn-firmware-1.1p0 firmware binary images for athn(4) driver
libiconv-1.14p0 character set conversion library
pure-ftpd-1.0.36p2-virtual_chroot small, easy to set up, fast and very secure 
FTP server
radeondrm-firmware-20130808 firmware binary images for radeondrm(4) driver


# cat /etc/pf.conf
#   $OpenBSD: pf.conf,v 1.52 2013/02/13 23:11:14 halex Exp $
#
# See pf.conf(5) for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between interfaces.

# increase default state limit from 10'000 states on busy systems
#set limit states 10

set skip on lo

# filter rules and anchor for ftp-proxy(8)
#anchor ftp-proxy/*
#pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021

# anchor for relayd(8)
#anchor relayd/*

block   # block stateless traffic
pass# establish keep-state

# rules for spamd(8)
#table spamd-white persist
#table nospamd persist file /etc/mail/nospamd
#pass in on egress proto tcp from any to any port smtp \
#rdr-to 127.0.0.1 port spamd
#pass in on egress proto tcp from nospamd to any port smtp
#pass in log on egress proto tcp from spamd-white to any port smtp
#pass out log on egress proto tcp to any port smtp


#block in quick from urpf-failed to any # use with care

# By default, do not permit remote connections to X11
block in on ! lo0 proto tcp to port 6000:6010




# cat /etc/rc.d/pure_ftpd
#!/bin/sh
#
# $OpenBSD: pure_ftpd.rc,v 1.1 2011/04/25 09:26:47 sthen Exp $

daemon=/usr/local/sbin/pure-ftpd
daemon_flags=-o -A -B -H -u1000

. /etc/rc.d/rc.subr

pexp=pure-ftpd: -pure-ftpd \(SERVER\)
rc_reload=NO

rc_cmd $1



# fstat
USER CMD  PID   FD MOUNTINUM MODE   R/WSZ|DV
root fstat  22374 text /usr   181962 -r-xr-xr-x   r24440
root fstat  22374   wd /  103968 drwxr-xr-x   r 1536
root fstat  223740 /   78522 crw--w  rwttyp0
root

Re: pure_ftpd other option(style) not work

2013-09-24 Thread Brian McCafferty

On 09/24/13 21:53, Fung wrote:


daemon=/usr/local/sbin/pure-ftpd
daemon_flags=-o -A -B -H -u1000



With -o set, is pure-uploadscript running?



pure_ftpd other option(style) not work

2013-09-23 Thread Fung
in current snapshots

install pure_ftpd

default /etc/rc.d/pure_ftpd is
---
#!/bin/sh
#
# $OpenBSD: pure_ftpd.rc,v 1.1 2011/04/25 09:26:47 sthen Exp $

daemon=/usr/local/sbin/pure-ftpd
daemon_flags=-A -B -H -u1000

. /etc/rc.d/rc.subr

pexp=pure-ftpd: -pure-ftpd \(SERVER\)
rc_reload=NO

rc_cmd $1
--

# /etc/rc.d/pure_ftpd start

# ps -auwx | grep ftpd
root  8530  0.0  0.0   852  1264 ??  Is10:44AM0:00.00 pure-ftpd: 
-pure-ftpd (SERVER) (pure-ftpd)

now user login work

if  add other flags like -o, for example , change  /etc/rc.d/pure_ftpd  

-daemon_flags=-A -B -H -u1000
+daemon_flags=-o -A -B -H -u1000


the daemon will start but nobody can login!

# pkill ftpd
# /etc/rc.d/pure_ftpd start
pure_ftpd(ok)


# ps -auwx | grep ftpd
root 15587  0.0  0.0   676   964 ??  Is10:48AM0:00.00 
/usr/local/sbin/pure-ftpd -o -A -B -H -u1000


# ftp localhost
Trying 127.0.0.1...
ftp: connect to address 127.0.0.1: Connection refused
Trying ::1...
ftp: connect: Connection refused
ftp


BTW, start pure-ftpd without rc.d script not work too

# pkill ftpd
# /usr/local/sbin/pure-ftpd -A -B -H -u1000 -o
# ftp localhost
Trying 127.0.0.1...
ftp: connect to address 127.0.0.1: Connection refused
Trying ::1...
ftp: connect: Connection refused
ftp






# sysctl kern.version
kern.version=OpenBSD 5.4-current (GENERIC) #55: Tue Sep 17 08:29:11 MDT 2013
t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC

# pkg_info | grep pure
pure-ftpd-1.0.36p2-virtual_chroot small, easy to set up, fast and very secure 
FTP server



Re: pure_ftpd other option(style) not work

2013-09-23 Thread Brad Smith

On 23/09/13 11:07 PM, Fung wrote:

in current snapshots

install pure_ftpd

default /etc/rc.d/pure_ftpd is
---
#!/bin/sh
#
# $OpenBSD: pure_ftpd.rc,v 1.1 2011/04/25 09:26:47 sthen Exp $

daemon=/usr/local/sbin/pure-ftpd
daemon_flags=-A -B -H -u1000

. /etc/rc.d/rc.subr

pexp=pure-ftpd: -pure-ftpd \(SERVER\)
rc_reload=NO

rc_cmd $1
--

# /etc/rc.d/pure_ftpd start

# ps -auwx | grep ftpd
root  8530  0.0  0.0   852  1264 ??  Is10:44AM0:00.00 pure-ftpd: 
-pure-ftpd (SERVER) (pure-ftpd)

now user login work

if  add other flags like -o, for example , change  /etc/rc.d/pure_ftpd

-daemon_flags=-A -B -H -u1000
+daemon_flags=-o -A -B -H -u1000


the daemon will start but nobody can login!

# pkill ftpd
# /etc/rc.d/pure_ftpd start
pure_ftpd(ok)


# ps -auwx | grep ftpd
root 15587  0.0  0.0   676   964 ??  Is10:48AM0:00.00 
/usr/local/sbin/pure-ftpd -o -A -B -H -u1000


# ftp localhost
Trying 127.0.0.1...
ftp: connect to address 127.0.0.1: Connection refused
Trying ::1...
ftp: connect: Connection refused
ftp


BTW, start pure-ftpd without rc.d script not work too

# pkill ftpd
# /usr/local/sbin/pure-ftpd -A -B -H -u1000 -o
# ftp localhost
Trying 127.0.0.1...
ftp: connect to address 127.0.0.1: Connection refused
Trying ::1...
ftp: connect: Connection refused
ftp






# sysctl kern.version
kern.version=OpenBSD 5.4-current (GENERIC) #55: Tue Sep 17 08:29:11 MDT 2013
 t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC

# pkg_info | grep pure
pure-ftpd-1.0.36p2-virtual_chroot small, easy to set up, fast and very secure 
FTP server


The pure-ftpd package works fine out of the box with either the rc.d 
script or manually running the equivalent binary and command line 
parameters. There is something you have done on your system to cause it 
to not work. Does fstat show the sockets created by pure-ftpd once it 
has been started up? Are you running a modified PF rule set?



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.