DirectAdmin not working anymore

[michaelbeers.nl]

Hello everyone,

I was trying to manage something into DirectAdmin and suddenly it doensnt work anymore.. It downloads a file with the following content below:

SSH-2.0-mod_sftp/0.9.9
4À&ÏhìsîmìY(4	⁄ƒecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa1024-sha1ssh-rsaèaes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-ctr,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,3des-ctr,3des-cbcèaes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-ctr,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,3des-ctr,3des-cbcjhmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,[email protected],hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,[email protected][email protected],zlib,none[email protected],zlib,none†ÅLàProtocol mismatch.

Does anyone knows this probleme and how to solve?

Thanks.

Michael Beers

 

[zEitEr]

Hello Michael,

Directadmin downloads a file? How can it be?

What exactly command or steps bring to downloading the file?

 

[michaelbeers.nl]

Hello Michael,

Directadmin downloads a file? How can it be?

What exactly command or steps bring to downloading the file?

Just accessing http://ip:2222 in the browser... nothing more

 

[zEitEr]

Well, it seems that you either moved Directadmin to another port, or it's stopped. It's SFTP (either ProFTPd or SSH) is now bind to 2222 port.

 

[toml]

mod_sftp is from proftpd, it is most likely configured for port 2222 (check /etc/proftpd.conf) and was started before directadmin which I am sure if you look in your logs you will see some sort of error from directadmin trying to bind to that port.

 

[michaelbeers.nl]

Proftpd is configured at port 21, 35000 (passive), 35999 (passive)

But DirectAdmin is giving a SSL error... but i already putted the SSL to 0 etc.

 

[toml]

Does your proftpd.conf have something similar to this in it? This would enable sftp on port 2222.

<IfModule mod_sftp.c>
   <VirtualHost x.x.x.x>
      SFTPEngine on
      Port 2222
      SFTPLog /var/log/proftpd/sftp.log
      SFTPHostKey /etc/ssh/ssh_host_rsa_key
      SFTPHostKey /etc/ssh/ssh_host_dsa_key
      SFTPAuthorizedUserKeys file:~/.sftp/authorized_keys
      SFTPCompression delayed
      MaxLoginAttempts 6
      SFTPClientMatch .* channelWindowSize 64MB
      AuthUserFile                    /etc/proftpd.passwd
  </VirtualHost>
</IfModule>

Also, as root execute the following command:
netstat -anp |grep 2222

 

[michaelbeers.nl]

netstat
http://pasteboard.co/7szYubiwV.png

directadmin.conf
http://pasteboard.co/7sCvL1M76.png

logs
http://pasteboard.co/7sEfXhVxB.png

 

[michaelbeers.nl]

No there is no vhost with port 2222, also the proftpd.vhost.conf is empty

 

[zEitEr]

SSL is not enabled in Directadmin on your server. It's still "SSH-2.0-mod_sftp/0.9.9" on your 2222 port:

Status:    Connecting to 149.210.xxx.216:2222...
Response:    fzSftp started, protocol_version=7
Command:    open "[email protected]" 2222
Command:	Trust new Hostkey: Once
Command:	Pass: *****
Error:	Authentication failed.
Error:	Critical error: Could not connect to server

Make sure to disable firewall, as you might have port redirects there.

Probably you followed this guide https://help.directadmin.com/item.php?id=439 to enable SFTP in ProFTPd.