Archive for May, 2009

If you want to bypass all automated means for more control, you can create a key and certificate request using the following commands:

/usr/bin/openssl genrsa 1024 > private.key
/usr/bin/openssl req -new -key private.key

where you can replace 1024 with 2048 if you want a stronger key.

The genrsa will ask you all information for the certificate.

Once created, you give the certificate request to a certificate authority. They’ll give you a new certificate, which you’d use with your private.key to make the pair.

DirectAdmin Access: Ports that needs to be opened in firewall.

20,21: FTP.

Note that ftp will use a “random high port number” if the client is in PORT mode, so you may need to add a port range into your /etc/proftpd.conf file to allow ftp connections, eg:

PassivePorts 35000 35999

22: ssh access

25, 587: smtp for exim to recieve email

53: dns (named), so your sites resolve. TCP/IP and UDP here.

80, 443: apache traffic, http and https

110, 993: client pop email access
143, 995: clients imap email access

2222: DirectAdmin Access

3306: mysql acess. For remote mysql access.

SBDavid

Setting the system date and clock

Setting the system date and clock

To set the system clock, use the date command.

For Redhat Systems, use the following format:

date –set=”Mmm DD HH:MM:SS YYYY”


Example:

date –set=”Jan 20 20:20:20 2009″

SYNOPSIS

date [OPTION]… [+FORMAT]
date [-u|--utc|--universal] [MMDDhhmm[[CC]YY][.ss]]

DESCRIPTION

Display the current time in the given FORMAT, or set the system date.

SBDavid

Proftpd Troubleshooting

Proftpd Troubleshooting

1) Try resetting your password.

2) Check the /etc/proftpd.vhosts.conf to see if there are any virtualhosts for the IP you’re connecting to. If there is, check the password file it points to, to ensure the account they’re logging in with exists in the file. If no virtualhost means it defaults to /etc/proftpd.passwd (check the /etc/proftpd.conf to confirm)

3) For any shared IP account, the user/cryptedpass should be in /etc/proftpd.passwd
Owned IPs should be in /usr/local/directadmin/data/users/username/ftp.passwd, but will have a virtualhost in the proftpd.vhosts.conf file.

4)Try running proftpd in debug mode.

SBDavid

How to run proftpd in debug mode

How to run proftpd in debug mode

If you are having any issues logging in, or uploading files, creating directories, etc.. you can run proftpd in debug mode to see what the proftpd server is doing and possibly find out why it’s generating the errors it is.

To do so, type the following:

/etc/init.d/proftpd stop
proftpd -n -d 20

« Prev - Next »