bonjour,
voila après avoir fouillé partout sur internet j'ai compris que pour faire marcher mon serveur en FTP (avec ma config), il fallait que je passe par du mode passif avec un MasqueradeAddress et des PassivePorts.

mais tout cela ne marche pas...
en effet apparemment dans la log de proftpd il ne me marque pas le masquerade.
de plus quand je me connecte avec un logiciel ftp, la connection passe, mais pas le List qui bloque sur l'adresse IP et les ports donné par le serveur (qui est l'adresse locale du routeur???)

au fait : en locale tout marche bien (en mode passif, meme le masquerade et les ports...)

#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
# 

# Includes DSO modules
Include /etc/proftpd.d/*.conf

# This is the directory where DSO modules resides

ModulePath /usr/lib/proftpd

# Allow only user root to load and unload modules, but allow everyone
# to see which modules have been loaded

ModuleControlsACLs insmod,rmmod allow user root
ModuleControlsACLs lsmod allow user *

ServerName			"ProFTPD Default Installation"
ServerType			standalone
DeferWelcome			off

MultilineRFC2228		on
DefaultServer			on
ShowSymlinks			on

TimeoutNoTransfer		600
TimeoutStalled			600
TimeoutIdle			1200

DisplayLogin                    welcome.msg
DisplayChdir                    .message
ListOptions                	"-l"
DenyFilter			\*.*/
UseIPv6                         Off

# Allow FTP resuming.
# Remember to set to off if you have an incoming ftp for upload.
AllowStoreRestart		on

# Port 21 is the standard FTP port.
Port				21

# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.


PassivePorts                    40000 41000

MasqueradeAddress               XXX.XXX.XXX.XXX

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances			30

# Set the user and group under which the server will run.
User				nobody
Group				nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask				000  000

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
#DefaultRoot ~

# Normally, we want files to be overwriteable.
AllowOverwrite			on

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
PersistentPasswd		off

# Be warned: use of this directive impacts CPU average load!
#
# Uncomment this if you like to see progress and transfer rate with ftpwho
# in downloads. That is not needed for uploads rates.
#UseSendFile			off

TransferLog /var/log/proftpd/proftpd.log
SystemLog   /var/log/proftpd/proftpd.log

<IfModule mod_tls.c>
    TLSEngine off
</IfModule>

<IfModule mod_quota.c>
    QuotaEngine on
</IfModule>

<IfModule mod_ratio.c>
    Ratios on
</IfModule>

# Delay engine reduces impact of the so-called Timing Attack described in
# [security.lss.hr]
# It is on by default. 
<IfModule mod_delay.c>
    DelayEngine on
</IfModule>

<IfModule mod_ctrls.c>
    ControlsEngine        on
    ControlsMaxClients    2
    ControlsLog           /var/log/proftpd/controls.log
    ControlsInterval      5
    ControlsSocket        /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
    AdminControlsEngine on
</IfModule>

#TransferRate RETR 20
#TransferRate STOR 200
#TransferRate STOU 200
#TransferRate APPE 200

<Limit LOGIN>
  AllowUser ftpuser01 
  DenyALL
</Limit>

<Anonymous /storage>
User ftpuser01 
Group ftpuser01
AnonRequirePassword on
MaxClients 3 "The server is full, hosting %m users"
DisplayLogin welcome.msg
<Limit WRITE READ STOR>
AllowAll
</Limit>
</Anonymous>

la je bloque complètement...
une aide?

Poste le Saturday 13 December 2008 10:57:39