Lost with Kiss and DA

[koudou]

This may sound crazy : lost with KISS Firewall ... The path to install the nobaloney version is so short that it is almost impossible to be lost. But (forgive me Jeff ...), I am lost.

I've installed a new server with DA (custombuild). Everything was fine (with Clamav and Spamassassin). And then I installed KISS. Every thing ran perfectly.

But FTP is not working ... I tried to see what the FTP client is doing and here is the thing :

220 ProFTPD 1.3.1 Server ready.
USER implic
331 Password required for theuser
PASS
230 User theuser logged in
SYST
215 UNIX Type: L8
REST 0
350 Restarting at 0. Send STORE or RETRIEVE to initiate transfer
SITE UMASK 022
500 'SITE UMASK' not understood
CWD public_html
250 CWD command successful
PWD
257 "/domains/theuser.net/public_html" is the current directory
TYPE A
200 Type set to A
PASV
227 Entering Passive Mode (88,191,66,121,138,58).
​

And then, time out. Looks like PASV is not allowed.

kiss stop -> and ftp works

kiss start -> and ftp times out
---------------------
I tried to see what I have in /etc/proftpd.conf and see

Port 21
PassivePorts 35000 35999

Looks correct.

But when I go to have a look in /usr/local/sbin/kiss , I do not understand nothing as I do not recognize the Passive Ports, and found only the UNPRIVPORTS set to 1024:65535
Is this doing the trick ?

I cannot see how I could follow better all the installation process as recommended by DA. And Kiss is supposed to be adapted by jeff to take care of passive ports for FTP. But obviously, it does not work.

I had to stop the firewall to allow FTP and update web sites, but this is not really secure. And after surfing 5 hours long on all the messages (lot of things from jeff and Proweb), I am exactly at the same point when I began.

Am I the only one who did not succeeded in using Kiss ?

And what to do ? Abandon Kiss and find another working solution ?

 

[tillo]

Add ports between 35000 and 35999 to your TCP incoming open ports, or (much better) load ip_conntrack_ftp module in your kernel with modprobe. This module with make both PORT and PASV FTP transfers to work.

 

[twaern]

how do i

1) Add ports between 35000 and 35999 to your TCP incoming open ports, or (much better)

2) load ip_conntrack_ftp module in your kernel with modprobe. This module with make both PORT and PASV FTP transfers to work.

just curious

 

[nobaloney]

This is an old thread.

Are you running KISS? Are you running one of the two versions from my website (nobaloney.net)? One or the other should work. Either one will add the modules to the kernel if they don't exist.

Jeff