i read a lot in this forum about ftp, filezilla proftp and a lot of variation. i dont understand why every time that somebody asl about this topic, the tipical answer is " why do you nee?", and, depend of the answer , conversation change of direccion to backup. or other topic.
i have several client form my virtual server, and, for diferent needed, they use ftp, my conclusion is ftp wont work in virtualmin, except in plain mode
in several times, somebody recomend move to sftp (SSH) , because is more sure, i check before recomend it, and i found 2 things
config sftp with virtual user name and password is easy and trustable
i can surf to any place , include i can move to AVR and ETC root main folder (???)
Actually, I admin 4 diferent server, 2 phisical and 2 virtual, all of them with virtualmin, with diferent ages, all of them in original condition ( i never change code or change default confi), and i still have problems the file transfer
the last time, i needed to move a WP to server , and , after a long losted time i use file file manager to upload , and terminal for hand it, but i cannot say to my clients, âhey, you need to lear how to user terminal and file managerâ
can any body give any option to end this problem?
Not used ftp for years, just to find out I restarted the proftp server and it just worked, what errors are your clients getting when trying to connect ?
What do you mean plain mode? Do you mean unencrypted? I have mine on forced TLS.
I would only let clients have ftp access because the base directory is already jailed to their folder. I would not give any client SSH access because they would never need it.
yes, you are right, i write it!
ok, i am going to be specific!.
if i use ftp ( filezilla or winscp), if i config ftp access, in 2 server i only have succes if i config in plain mode (no tls or sll), in the other 2 servers, no chance, some times i receive âECONNREFUSED - Connection refused by serverâ, other keep in a long delay.
if i use sftp, access is granted, using virtual server main user, and sftp appears in defualt home or public_html folder, but folder tree is complete, and i can go up and up !
about your first article ,i need to tell you that fir part of it (modification of /etc/proftpd/conf.d/virtualmin.com) is part of default setting of virtualmin (as jcameron says after âOk this has been implemented for inclusion in the next Webmin release.â), but i dont understand the second part of article:
In Webmin -->Servers --> ProFTPD --> Network Options add a html option for
TLSRequired on/off radio field
TLSProtocol input fiield, with a suitable value TLSv1.2 TLSv1.3 that is pulled from the conf file. If needed this field could have an off value where this values is not written to the conf.
Edit the config file - Webmin -->Servers â ProFTPD Server â Edit Config Files â Editing config file: /etc/proftpd/conf.d/virtualmin.conf
Enforce TLS by changing:
TLSRequired off â TLSRequired on
Optionally, add the following to declare what TLS protocols are allowed. Add this just below âTLSRequiredâ They have to be installed on the system to work. The example below is just to give you context, you probably only want TLSv1.2.
TLSProtocol TLSv1 TLSv1.1 TLSv1.2
Save the config.
Apply the changes (this will restart the ProFTPD service).
tx, now i understand, i make this change in one of my server, and after save and apply (restarting daemon), i try again in filezilla, and i receive the same arror that before
âStatus: Server sent passive reply with unroutable address. Using server address instead.
Command: MLSD
Error: Connection timed out after 20 seconds of inactivity
Error: Failed to retrieve directory listingâ
"
ok i read your articule, my problem is diferent, BUT when i use debug mode in filezilla , i discovered that proftpd use intenal ip, NO external ip, and this is the razon of reject passive mode, the question is i dont know where i change this ip!
i use MasqueradeAddress xx.xxx.xx.x. option , know i jump over passive mode problem, but i still have problem with error ¨Retrieving directory listingâŚÂ¨Â¨
Active mode requires a lot of the clientâs router/firewall, in that the server has to call back to the client. Passive mode does not need any special treatment in the firewall, as the server doesnât need to be able to make a connection back to the client. Passive mode is the default mode in any modern FTP client for this reason, youâre making it harder on yourself by forcing active mode.