Proftpd

I

IPaddress

Verified User
Joined
Feb 21, 2004
Messages
86
Hi.
Im running Directadmin 1.332000 on a CentOS release 5 (Final).

In the LogWatch im getting:
--------------------- proftpd-messages Begin ------------------------
**Unmatched Entries**
MyDomain.com (::ffff:www.xxx.yyy.zzz[::ffff:www.xxx.yyy.zzz]) - Preparing to chroot to directory '/Some/Folder/InMy/FTP/public_html/noborrar'
MyDomain.com (::ffff:www.xxx.yyy.zzz[::ffff:www.xxx.yyy.zzz]) - Preparing to chroot to directory '/Some/Folder/InMy/FTP/public_html/noborrar'
MyDomain.com (::ffff:www.xxx.yyy.zzz[::ffff:www.xxx.yyy.zzz]) - Preparing to chroot to directory '/Some/Folder/InMy/FTP/public_html/noborrar'
...
...
... A lot more of this messages repetead.
...
...
---------------------- proftpd-messages End -------------------------
(Where "www.xxx.yyy.zzz" are differents IP)

Every day im reciving more and more of them.
What does they mean? What can i do to avoid them?

Bye!


PD: Sorry for my poor English, im from Argentina.
 
Proftpd is the only supported ftp server for directadmin.
 
look again, scsi; those ARE proftpd lines.

Logwatch is warning you about unmatched entries; something was done but not undone. You have to actually check the log file to figure out what's going on.

Jeff
 
Hi.
For what i saw all those lines are from the xerlog.legacy (the TransferLog). But those aren't the exact lines in the log.

For example, in the Logwatch i can see this line:
"My.Domain.com (::ffff:www.xxx.yyy.zzz[::ffff:www.xxx.yyyy.zzz]) - Preparing to chroot to directory '/home/infolew/domains/MyDomain.com.ar' "
And in the xferlog.legacy i can see:
"Mon Apr 6 18:19:26 2009 75 ::ffff:www.xxx.yyyy.zzz 3724325 /home/MyUser/domains/MyDomain.com.ar/MyFolder/Folder/MyFile.rar b _ i r MyEMail@iMyDomain ftp 0 * c"

xferloglegacy.log is the only ProFTP log where i've been able to find something realted to what i'm getting in the LogWatch.

I'm not understanding whats the meanning of "Preparing to chroot to directory '...'". Can someone explain that to me please?

Thanks for your help!

Bye!
 
ALAIK these are correct log lines saying you one of your authorised users login in and proftpd 'chroot' him to 'his own' dir. Or wait some more comments if you are unsure.

At all, you can test it easy, login you and see what hapen in your proftpd log files, at least, when I test it I can see my own IP listed and the 'chroot' to the appropiate directory.

Hope this help,
Ramon
 
Nono, it is actually PROFTPD.
i made a mistake writing the title of the thread, sorry for that! (its really confusing, so if a moderator can change that, it would be great please).

How can I avoid PROFTPD to Log that?
Its not something i need to know every time a user logs on, and makes my logwatch gigant!

Thanks for your help!

Bye!
 
But i dont want Logwatch to ignore all PROFTPD logs, only those lines.
Is that possible?

Bye!
 
You must log in or register to reply here.
Back
Top