DSM-G600, DNS-3xx and NSA-220 Hack Forum

Have you tried specifying the config file on the command line? vsftpd /path/to/vsftpd.conf

hectorg wrote:

ok I tried that and it just hangs

I think you need to send it into the background yourself.

vsftpd /ffp/etc/vsftpd.conf >/dev/null 2>&1 </dev/null &

Here's a config I tested:

listen=yes
local_enable=yes
ftp_username=nobody
xferlog_enable=yes
vsftpd_log_file=/ffp/var/log/vsftpd.log
secure_chroot_dir=/ffp/var/empty

Note that you need to create the secure_chroot_dir manually:

mkdir -p /ffp/var/empty

hectorg wrote:

It works but again hangs (it doesnt go to the backgroud)

Yes, it's a little difficult. Try creating a custom start command like this:

..
start_cmd="vsftpd_start"

vsftpd_start()
{
  proc_start_bg "$command"
}

...

For more examples, see start/sshd.sh or start/syslogd.sh (they use proc_start, but not proc_start_bg).

proc_start_bg will find $vsftpd_flags

remove the >/dev/null 2>/dev/null & from the flags, that's what the _bg is for.

but you're missing: run_rc_command "$1"

hectorg wrote:

Is there any documentation on this ?

Use the source, Luke.

Great work hectorg!
How about making a wiki page with your install procedure? Things can be pretty hard to find in the forum sometimes...

Wow hectorg! What an elaborate page you made! Very impressive.
I actually used your instructions from the forum but this page, I'm sure will be very useful.

BTW, I don't think there is any need to reboot at the end. I didn't anyway.

I took another approach than the userlist that you are using - although I actually started using it - until I realized that I don't exactly know how strong the passwords of the system's users are. Therefore I wanted to only allow a select group of users access to the ftp server.

My scenario is this: A few persons need to share a ftp directory from the Internet.
For security reasons I don't like the userlist as it means that the connection is dropped right after you have provided the username. This can be used (although with a fairly time-comsuming brute force attack) to deduce the available usernames on the system. It is much better that the user (attacker) has to provide both username and password before the connection is cut. This way the attacker won't know whether the username or the password was incorrect and thus it expands the search space immensely.

This is why I have used an approach of a master config file which is very strict (empty local_root dir, no upload, no download, guest account, etc.) and then I have a user_conf dir with a config file per user that relaxes the strict permissions.

I probably should update the wiki page with the details.

I already updated the wiki. And yes, moving services away from the well-known ports tends to make your log files a whole lot shorter!

hectorg:
it works according to your instructions on the wiki

however i can't start vsftpd via your start script ..

i changed the path to the .conf in the script, but it still does not start
also i am interested in a stop/restart option, but there is not .pid file ;-)

#!/ffp/bin/sh
 
 # PROVIDE: vsftpd
 # REQUIRE: LOGIN
  
  . /ffp/etc/ffp.subr
   
   name="vsftpd"
#   command="/ffp/sbin/vsftpd"
command="/ffp/sbin/vsftpd"
   vsftpd_flags="/ffp/etc/vsftpd/vsftpd.conf >/dev/null 2>&1 </dev/null"
   required_files="/ffp/etc/vsftpd/vsftpd.conf"
   start_cmd="vsftpd_start"
    
    vsftpd_start()
    {
      proc_start_bg "$command"
      }

this command works:

vsftpd /ffp/etc/vsftpd/vsftpd.conf &

Last edited by mastervol (2009-02-07 15:28:05)

I am having trouble getting vsftpd to run.  I am a linux n00b and am sure it's a case of PEBKAC, but I'm still hoping someone here might help me.

I have followed the instructions on the howto to the letter.  When I go to run vsftpd, using:

vsftpd /ffp/etc/vsftpd.conf >/dev/null 2>&1 </dev/null &

I get no errors and it returns to the command line prompt.  But after any input at the prompt, I get an exit notice:

[1]+  Exit 1                  vsftpd /ffp/etc/vsftpd.conf > /dev/null 2>&1 < /dev/null

A check with ps or top shows no daemon running.  Attempts to ftp in fail.  I have verified that all of the relevant files exist.  Anyone have any ideas?  Your help is greatly appreciated.

Last edited by dilettanti (2009-03-06 05:36:59)

Thansk for the write up Hector,

Please help:

i can't install the package - i get error

"FATAL: /ffp not found in package"

what does this mean?

i do have funplug installed... that is kinda the strange part? I have setup rsync to backup nightly and that seems ok (did a manual run which is still going).

The error states "ffp not found IN package" - i don't get it - unless the package is corrupted. So i went ahead and tried older packages - came up with the same message...