That's odd... Are you using ftp from the command line? I mean, the ftp from e.g. krb5-workstation?

It looks like your client is asking for extended passive (EPASV 2) and then passive (LPASV). I just did this on a RHEL 5.4 client to a RHEL 5.4 vsftpd server and I am not seeing anything near the same log entries. Have you made any changes to your vsftpd configuration?

On 02/08/2010 07:32 PM, Tim Evans wrote:
On 02/ 8/10 05:46 PM, [email protected] wrote:

You're showing us the client side, looks like. What about the server
side? Anything interesting in the logs (messages and xferlog) there?

Pretty much the same, just more verbose:

Mon Feb 8 15:21:47 2010 [pid 19909] FTP command: Client "192.168.1.7",
"USER username"
Mon Feb 8 15:21:47 2010 [pid 19909] [username] FTP response: Client
"192.168.1.7", "331 Please specify the password."
Mon Feb 8 15:21:48 2010 [pid 19909] [username] FTP command: Client
"192.168.1.7", "PASS <password>"
Mon Feb 8 15:21:48 2010 [pid 19908] [username] OK LOGIN: Client
"192.168.1.7"
Mon Feb 8 15:21:48 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "230 Login successful."
Mon Feb 8 15:21:48 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "SYST"
Mon Feb 8 15:21:48 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "215 UNIX Type: L8"
Mon Feb 8 15:21:53 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "TYPE I"
Mon Feb 8 15:21:53 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "200 Switching to Binary mode."
Mon Feb 8 15:21:53 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "EPSV 2"
Mon Feb 8 15:21:53 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "522 Bad network protocol."
Mon Feb 8 15:21:53 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "LPSV"
Mon Feb 8 15:21:53 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "500 Unknown command."
Mon Feb 8 15:22:29 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "TYPE A"
Mon Feb 8 15:22:29 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "200 Switching to ASCII mode."
Mon Feb 8 15:22:29 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "LPSV"
Mon Feb 8 15:22:29 2010 [pid 19910] [username] FTP response: Client
"192.168.1.7", "500 Unknown command."
Mon Feb 8 15:22:32 2010 [pid 19910] [username] FTP command: Client
"192.168.1.7", "QUIT"

Any iptables rules on the client?

Nope

Are you going through a proxy, or is this direct?

Need to check on that.




--
Thomas Cameron, RHCA, RHCDS, RHCVA, RHCX, CNE, MCSE, MCT
Solutions Architect Team Lead, Central Region
512-241-0774 office / 512-585-5631 cell / 512-857-1345 fax

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/

_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to