Possible PASV port theft, cannot open data connection???

[PranksterO]

Ok so heres the problem. Everytime I try to connect to my ftp I get a message saying "Possible PASV port theft, cannot open data connection???". I am using wu-ftp and running redhat 8.0. I really want to keep using wu-ftpd because by now Im pretty farmilar with it. Someone said that if i opened up port 20 that it would work, but that didnt help any. Another peoson said that if I reconfigure wu-ftp with something like (not sure if its right, but I have the correct way at home) ./configure --disable-pasvip it will fix the problem. I cant get this to work either. Does anyone know of a better fix??? Thanks!

I have done a google search and every kind of search on this problem but no one really seems to give any useful info. I just wanted to say that before I get the old, "try man", or "google = answer" message.

[bwkaz]

I know you want to keep wu-ftpd, but scp works just fine for me. Use it just like a normal cp, but with username@host: before the remote path and filename (which can be either the first or second file listed; either the source or destination).

If you're dead-set on using plaintext passwords, though (;)), then your problem (this is by inspection of the wu-ftpd source, BTW) is that the PASV connection that your client is using is coming from a different IP address than the FTP control connection. This is almost always a sign of, like it says, someone stealing your control connection (somehow) and redirecting the files to their machine. However, it could also be caused if your client is behind a NAT box. Is that the case? If so, if the NAT box is Linux, get a recent iptables version, and a recent kernel, and load the ip_conntrack_ftp and ip_nat_ftp kernel modules. That will allow you to use normal (non-PASV) FTP through the NAT box.

[PranksterO]

well i tried the ./configure --disable-pasvip method and it worked! The only problem is now that when I log into my server I pretty much have access to the whole thing. I followed the tutorial here (http://tldp.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/ftpd.html) and it worked the first time I did it, but now the user has access to everything. I dont want them to have access outside of the ftp directory. How do I fix this?

[PranksterO]

I dont know if this helps or not but I think that my ftpaccess file is not being read. I have a welcome message setup and its not being displayed at logon anymore.

[bwkaz]

I don't know enough about wu-ftpd to answer that...

I assume this issue isn't covered in any of their docs at www.wu-ftpd.org, right?

Did the newly-installed wu-ftpd overwrite your old config file, by any chance?