Hi Jason,

Straight from the ProFTPD documents, which you can check out here...

http://www.flyhmstr.demon.co.uk/proftpd/faq/proftpdfaq-4.html

Section 4.12  states:

4.12 Slow logins
This is probably caused by a firewall or DNS timeout. By default ProFTPD
will try to do both DNS and ident lookups against the incoming
connection. If these are blocked or excessively delayed a slower than
normal login will result. To turn off DNS and ident use:

  UseReverseDNS                 off
  IdentLookups          off

You can turn off ReverseDNS first to see if that helps your situation,
or go with both of them.

Robert


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jason Lim
Sent: October 3, 2001 12:04 AM
To: [EMAIL PROTECTED]
Subject: Re: Slow FTP Connection?

Hi Robert!

Can you tech me how to disable reverse DNS for FTP server?

T.Q.
Jason Lim




Robert Toth wrote:
>
> Hiya Svavar!!
>
> The problem is probably related to the fact that your workstation(s)
> INSIDE of your lan (on the 10.100.xx.xx network) do not have DNS
entries
> in your DNS server... Proof is that the reverse DNS for the external
> world works great usually (unless you try a non-listed host behind a
NAT
> gateway, or something similar : this should also take 20 or so seconds
> as well as there is no official DNS setup for this)
>
> Two suggestions:
> 1) Enter in your complete DNS database for all your workstations and
> inside hosts on your 10.100 network..  (BEST)
> 2) Disable Reverse-DNS lookups on the FTP server (less convenient for
> logging purposes - You'll only have IP addresses that you'll be forced
> to look up by hand if you need to.. Less secure as you won't be able
to
> enforce Reverse DNS validation rule for logon (ie: drop any non-listed
> hosts/nodes that attempt to logon - only valid Internet DNS-listed
hosts
> are granted access).
>
> So if you don't want to block anyone from your FTP server, and if you
> don't really need FQDN's in the log file, simply disable the
Reverse-DNS
> lookups in the FTP server configuration.  That will remove the delay.
>
> Otherwise, spend the time creating the missing internal DNS database,
so
> that you can keep the security rules in place...
>
> Hope this helps...
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Svavar Örn
> Eysteinsson
> Sent: October 1, 2001 8:56 AM
> To: [EMAIL PROTECTED]
> Subject: RE: Slow FTP Connection?
>
> Hi. Thanks for the reply.
> I'm not very good at DNS so can you give me a hint.
> I checked the reverse address for the server in 10.100. It's :
>
> Address : 10.100.0.5
> Hostname : x.internal.x.is
> TimeToLive : default
>
> Best regards,
>
> Svavar Orn
> [EMAIL PROTECTED]
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of # sriram #
> Sent: 1. október 2001 12:40
> To: Red Hat 7. 1 MailingList
> Subject: Re: Slow FTP Connection?
>
> check the reverse lookup on ur DNS for this machine
>
> On Mon, 1 Oct 2001, Svavar Örn Eysteinsson wrote:
>
> !Date: Mon, 1 Oct 2001 12:35:33 -0000
> !From: Svavar Örn Eysteinsson <[EMAIL PROTECTED]>
> !Reply-To: [EMAIL PROTECTED]
> !To: Red Hat 7. 1 MailingList <[EMAIL PROTECTED]>
> !Subject: Slow FTP Connection?
> !
> !Hello.
> !I'm having a strange problem with my ftp server, not a problem maby a
> bug.
> !My FTP server is running the latest Kernel 2.4.10 and ProFTPD in
Xinetd
> !mode.
> !The server has two interfaces. The Eth0 is the public(213.176.x.x)
> !and Eth1 as internal(10.100.0.5). Every time a make a ftp connection
to
> the
> !server on 10.100.0.5 or 213.176.x.x address it takes about 10-20sec
to
> !display
> !the login window. This happens when i am at work on the internal net.
> !But when i do it on some other place, for an example another company
> with
> !a diffrent pipe and ISP it displays the ftp login window right ahead.
> !
> !Any ideas? This is very strange.
> !
> !This happens when i do : "ftp 10.100.0.5" or "ftp 213.176.x.x" :
> !
> !"Connected to x.x.x.x"
> !
> !and it waits there for 10-20secs and finnaly it displays :
> !
> !220 ProFTPD 1.2.2 Server (HOSTNAME) [hostname]
> !User (x.x.x.x:(none)):
> !
> !Is it maby something to do with the firewall?
> !
> !Thanks for your time.
> !
> !Cheers!
> !
> !Best regards,
> !
> !Svavar Orn
> [EMAIL PROTECTED]
> !Reykjavik - ICELAND
> !
> !
> !
> !_______________________________________________
> !Seawolf-list mailing list
> [EMAIL PROTECTED]
> !https://listman.redhat.com/mailman/listinfo/seawolf-list
> !
>
> ----------------------------------------------------------
> When i read about the evils of smoking , I gave up reading
> ----------------------------------------------------------
>
> _______________________________________________
> Seawolf-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/seawolf-list
>
> _______________________________________________
> Seawolf-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/seawolf-list
>
> _______________________________________________
> Seawolf-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/seawolf-list



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list




_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to