[Bug 420671] New: vsftpd preconfiguration needs to be tuned for firewall - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 426296] New: ncurses YaST...

[Bug 420671] New: vsftpd preconfiguration needs to be tuned for firewall

older
[Bug 425889] New: Main...

bugzilla_noreply＠novell.com

27 Aug 2008 27 Aug '08

11:56

https://bugzilla.novell.com/show_bug.cgi?id=420671 Summary: vsftpd preconfiguration needs to be tuned for firewall Product: openSUSE 11.0 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: hvogel@novell.com ReportedBy: lnussel@novell.com QAContact: qa@suse.de CC: locilka@novell.com, thomas.siedentopf@novell.com Found By: Development /etc/sysconfig/SuSEfirewall2.d/services/vsftpd only results in opening the ftp port itself in the firewall (ftp-data is useless, it's outgoing only). To actually make the ftp server properly work one however needs to also allow ports for passive mode. Therefore we either need a special yast module to support vsftpd (and remove the service file) or the vsftpd config file and SuSEfirewall2 service file needs to be preconfigured for a passive port range. UDP="ftp-data" should be removed as well. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

27 Aug 27 Aug

15:51

New subject: [Bug 420671] vsftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c1 --- Comment #1 from Ludwig Nussel 2008-08-27 09:51:26 MDT --- same thing with pure-ftpd -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

8 Sep 8 Sep

13:09

New subject: [Bug 420671] vsftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User hvogel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c2 --- Comment #2 from Hendrik Vogelsang 2008-09-08 07:09:45 MDT --- Any suggestion for the range? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

9 Sep 9 Sep

14:57

New subject: [Bug 420671] vsftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User hvogel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c3 Hendrik Vogelsang changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #3 from Hendrik Vogelsang 2008-09-09 08:57:20 MDT --- i used 1024:2024 for now -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

10 Sep 10 Sep

07:39

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c4 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | Summary|vsftpd preconfiguration needs to be tuned for |vsftpd/pure-ftpd preconfiguration needs to be |firewall |tuned for firewall --- Comment #4 from Ludwig Nussel 2008-09-10 01:39:57 MDT --- There are some well known services in that range. I'd suggest to use something above 30000 but not to high in order to not hit the local port range. E.g 30000:30100 or so. pure-ftpd needs to be fixed too. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:48

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User suse-beta@cboltz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c5 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #5 from Christian Boltz 2008-09-10 08:48:33 MDT --- What about using FW_LOAD_MODULES="ip_conntrack_ftp" instead of opening random ports? (At least this is what worked on 10.2, I didn't test it on 11.0 yet.) Needless to say that FW_LOAD_MODULES is not (yet?) supported in the service files AFAIK... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

12 Sep 12 Sep

12:06

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User hvogel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c6 Hendrik Vogelsang changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hvogel@novell.com AssignedTo|hvogel@novell.com |locilka@novell.com Status|REOPENED |NEW --- Comment #6 from Hendrik Vogelsang 2008-09-12 06:06:46 MDT --- Can we fix this for real in the service files then? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

12:13

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c7 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|locilka@novell.com |hvogel@novell.com --- Comment #7 from Lukas Ocilka 2008-09-12 06:13:27 MDT --- The services file don't seem to have the possibility but let's ask Ludwig. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

12:13

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |lnussel@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

12:50

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c8 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|lnussel@novell.com | --- Comment #8 from Ludwig Nussel 2008-09-12 06:50:45 MDT --- ip_conntrack_ftp when used on desktop systems is a security risk. It allows (at least that was the case in the past) malicious servers to open any port via faked ftp transfers. I'd not recommend anyone to use that module. Please go for the port range instead. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15 Sep 15 Sep

12:52

New subject: [Bug 420671] vsftpd/ pure-ftpd preconfiguration needs to be tuned for firewall

https://bugzilla.novell.com/show_bug.cgi?id=420671 User hvogel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=420671#c9 Hendrik Vogelsang changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #9 from Hendrik Vogelsang 2008-09-15 06:52:46 MDT --- both submitted -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

5710

Age (days ago)

5729

Last active (days ago)

Download

10 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com