SlrG

Why are you using a different config file instead modifying the one provided by me? The problem is, that you have to add the following line to your config (below "DefaultServer on"): PidFile /var/run/proftpd.pid This file is used to detect the running process. With your conf it will be created at a different position than the plugin expects it to be.

I'm glad the the update got it working for you.

The syslog doesn't contain any error messages regarding the plugin. The plugin should show under settings. edit: If it doesn't please check the following locations: /usr/local/emhttp/plugins/proftpd/proftpd.png # plugin page icon file /usr/local/emhttp/plugins/proftpd/proftpd.page # plugin page file /usr/local/emhttp/plugins/proftpd/proftpd.php # plugin page file /usr/local/emhttp/plugins/proftpd/event/disks_mounted # event handler will start proftpd /usr/local/emhttp/plugins/proftpd/event/unmounting_disks # event handler will stop proftpd They should all be present.

@flybynite: Then please post a syslog.

If you have modified the proftpd.conf, make a backup of it first. Then you should delete the whole proftpd folder and the plugin file and reboot your server. Afterwards put the version from the first post into /boot/config/plugins/ and reboot again. Then replace the base proftpd.conf with your backup. If this doesn't get you going, please post a full syslog. regards, SlrG

@loady Necrotics idea sounds like a good one. Try setting proftpd to a different port in the proftpd.conf and forward the same one from external.

Sorry to bug you again. What are the syslog messages for the connection attempts? - Or don't you get any? What port is 149.254.49.34? In the dyndns connection attempts its visible that your ip at that time was 92.239.184.62. So if the port shows as open with dyndns that seems to be alright. edit: If I click on the second link you posted I get asked for user credentials. Which indicates the ftp is running for this atm. (Still set to port 21?) Also with FileZille I can connect, too. Of course without user and pass the access gets denied. If you could setup a test user, jail him into an empty directory and send me the credentials via pm we could test if I can fully connect to you.

Yes this should be possible. I'm doing it this way myself sometimes. You'll have to setup the wlan on your phone as mobile hotspot.

@loady No problem. I was rather busy this weekend myself. Has your phone client the ability to specify the port it should connect, too? Could you try to forward port 21 from router to 21 on your server? Does it work then? Do you have another phone client you could test? 192... is a local ip address which will not be visible to the outside world. The only external visible system is your router with the ports it has open. The dyndns will always link directly to your router. So if you use ftp://warpserver.dontexist.com you will have to specify the port number you want to connect to. So it should be: ftp://warpserver.dontexist.com:51203 Only then it will be able to connect to your server. Could you try this in your webbrowser on pc and phone? Both locally and remotely please. And please post the error message as well as the syslog messages. Oh and if your phone browser opens the phones ftp client it is propably because it can't handle ftp itself. Instead of the phone, could you try to use a pc with a full webbrowser to try to access remotely? If this works it indicates the phones browser/ftp client as the culprit. I'm very sorry that I have to fish around in the dark here. I still have no clear understanding what makes the communication between the systems fail so miserably.

In the webbrowser you shouldn't need to specify the port if it is 21. It should work without. What happens if you set your phone client to active mode? What happens if you don't define user and password in the phone client? Normally it should ask you to provide the credentials. Maybe you have a typo in your provided one? (It's unlikely, because there should be a clearer error message in the log, but please check it anyway.) During your tests please use a simple password without special chars. Maybe it chokes on something like that.

What do you enter in the address bar to connect to your FTP in local network? What settings do you use in the FTP client? Obviously local access should work without problems, before we start fixing remote access. Are you using port 21 when trying local access? Does your FTP client on phone ask you to supply an username and password? Do you have them set somewhere in settings? Has your server a fixed IP or does it get its IP via DHCP?

Hi loady, what does the syslog say this time, when you try to connect? To enable passive ports you put the following in your proftpd.conf: PassivePorts 49152 65534 Change it to the port range you want and forward the same range from your router to the unraid server.

@loady I'm no dd-wrt user, so I can't say. But lets try this: On the port forwarding page enable your proftpd rule, this will forward external port 51302 to internal port 21 on your server. Make sure you have clicked apply settings. Then in your webbroser address field enter: ftp://your.dyndns-address.com:51302/ What message do you get? If it doesn't work try this to check if your port is open. If you want to forward ports for passive use, you have to tell proftpd to use those ports. Normally it won't. Have a look here. The article you linked to, explains a proftpd ftp server running on the dd-wrt router.

@loady I can connect via dyndns and webbrowser to the proftpd on my unraid machine, so yes it should be possible. What does the syslog of your unraid machine show for the time you tried to connect? If it doesn't show anything, the server got no connection. If it does, please post this part of the log. If ftp connection works internally everything regarding proftpd should be setup correctly. If the external connect fails, it is propably caused by the portforwarding on your router. Sometimes it isn't enough to forward to port 21 only. It may be required to forward a fixed passive range, too. See this writeup here. I don't know if this is the problem, but it could be. edit: Also you could try using a different port. If you have a look at this list of ports, not registered and free for personal usage is everything from 49152 to 65535.

Sadly it doesn't explain your problem. Lets analyse the lines: dave:x:1002:100:ftpuser /mnt/disk1/audiobooks:/mnt/disk1/audiobooks:/bin/false test:x:1003:1003:ftpuser:/home/test: ftpuser is the keyword my plugin scans the password file for. Every user with this keyword will be allowed ftpacces. Users without this keyword will be blocked. This is a security measure, so users with shell access can't be hacked if the ftp is compromised. If a path is given after the keyword it will be extracted and put in the next field (this is the home directory field), lastly a /bin/false will be added (this is an invalid shell command), so shell access for ftpusers will fail, even if their password gets cracked. Your line for user dave looks perfectly normal. The test line you created by shell doesn't, but that doesn't explain the dave problem. What made me ask you to post the file is this line from your log: Jun 29 19:12:52 Hilda proftpd[17635]: 127.0.0.1 (192.168.1.115[192.168.1.115]) - notice: unable to use '~/' [resolved to '/mnt/cache/FTP/']: No such file or directory I can't understand why he resolves to /mnt/cache/FTP. That is my FTP directory I have setup on my system. Other than in the examples in the readme file I have no reference to this directory in my plugin. It should not appear on your system, but it obviously does. So I thougt it might have been added in the passwd file. But it didn't. If I create a folder audiobooks on my disk1 and create an user dave with comment ftpuser /mnt/disk1/audiobooks my log looks like this: Jul 2 19:41:14 lafiel proftpd[7261]: 127.0.0.1 (192.168.178.98[192.168.178.98]) - FTP session opened. Jul 2 19:41:14 lafiel proftpd[7261]: 127.0.0.1 (192.168.178.98[192.168.178.98]) - Preparing to chroot to directory '/mnt/disk1/audiobooks' Jul 2 19:41:14 lafiel proftpd[7261]: 127.0.0.1 (192.168.178.98[192.168.178.98]) - USER dave: Login successful. Jul 2 19:41:19 lafiel proftpd[7261]: 127.0.0.1 (192.168.178.98[192.168.178.98]) - FTP session closed. So the question is, what makes him try to change root to ~/ or resolve to /mnt/cache/FTP? It just makes no sense. Please check the proftpd.conf, that the DefaultRoot looks exactly like this: DefaultRoot ~ Replacing the whole config file will be even better as this will make sure there are no unintentionally uncommented lines. If that doesn't solve it, I would try to fully remove my plugin, delete all ftpuser users, reboot the server and check that there are no traces left. Then reinstall the plugin and try again.

@Necrotic sudo -u nobody mkdir ... will execute the command given (mkdir) as user nobody. The created directory will have the user nobody as owner. sudo -u root ... will execute the command given as user root. The log messages you posted don't indicate an error and should not be responsible that the config editor didn't work for you. But I'm glad you got it working. Also thank you very much for posting the ssl instructions.

@dearleuk Just to be sure, please check that your config is exactly like this: # Server Settings ServerName ProFTPD ServerType standalone DefaultServer on PidFile /var/run/proftpd.pid # Port 21 is the standard FTP port. You propably should not connect to the # internet with this port. Make your router forward another port to # this one instead. Port 21 # Set the user and group under which the server will run. User nobody Group users # Prevent DoS attacks MaxInstances 30 # Speedup Login UseReverseDNS off IdentLookups off # Control Logging - comment and uncomment as needed # If logging Directory is world writeable the server won't start! # If no SystemLog is defined proftpd will log to servers syslog. #SystemLog NONE #SystemLog /boot/config/plugins/proftpd/slog TransferLog NONE #TransferLog /boot/config/plugins/proftpd/xferlog WtmpLog NONE # As a security precaution prevent root and other users in # /etc/ftpuser from accessing the FTP server. UseFtpUsers on RootLogin off # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable. Umask 022 # "Jail" FTP-Users into their home directory. (chroot) # The root directory has to be set in the description field # when defining an user: # ftpuser /mnt/cache/FTP # See README for more information. DefaultRoot ~ # Shell has to be set when defining an user. As a security precaution # it is set to "/bin/false" as FTP-Users should not have shell access. # This setting makes proftpd accept invalid shells. RequireValidShell no # Normally, we want files to be overwriteable. AllowOverwrite on Then please open the /config/passwd file on your flash drive and post the line for the user you created (paul). It will not contain any password, so don't worry.

@dearleuk proftpd tries to chroot to ~/ instead of /mnt/disk1/audiobook like it should. This fails and therefore the connect fails too. Did you change anything in the provided proftpd.conf? At the moment I can't say why this is happening. I'll have to think about it a little longer. @Necrotic Do you think you could delete or move the proftpdce.zip and provide a log after restarting your server? Also thank you very much, for reporting the \ problem. I never tried regex paths, so I didn't notice it myself. I'll try to fix this problem in a future version.

Did you restart the proftpd daemon after adding the user? If no, please do. If yes, could you post the lines from the syslog from the time when you try to connect? They might give more detail on the error. Also please post the users and permissions for /mnt/, /mnt/disk1 and /mnt/disk1/audiobooks.

Don't change permissions or share settings, but change the proftpd config. Add the following lines: # Limit write access to a directory and subdirs <Directory /mnt/user/movies/dvdr> <Limit WRITE> DenyAll </Limit> </Directory> If you want to allow write operations to a certain directory you add: # Allow write access to certain directory <Directory /mnt/user/movies/dvdr/upload> <Limit WRITE> AllowAll </Limit> </Directory> Then save the config and restart proftpd to enable the changes. This will disable write access for all ftp users. It may be modified to apply to certain users only, or maybe even to only block write access not coming from the local network. I never tried this through, so you will have to google around if it is possible. Proftpd is quite powerful in what it can do. Sadly there is no php gui which supports all the bells and whistles.

Hmm... If you want only read access to your shares this should be pretty secure if you use a password you don't have anywhere else. Even if it gets cracked (I use an unecrypted password for years now and was never hacked.) you won't compromise other logins and the attacker will have only read access. The installation problem was my mistake. I moved the binary files from github to my personal webspace but forgot to post the modified plugin. Please redownload it from the first post and try again.

If you already have dyndns running, you could forward a port of your choice to the port proftpd uses on your unraid server. This will make the ftp service available worldwide. Using port 21 on the router is not recommended, as this port will be an obvious choice for an bruteforce attack. Using the proftp on port 21 on the server is no problem, as this will not be available for outside access. If you create an user with access to /mnt/user you will be able to access your user shares. Be aware however, that if you have sensitive data in those shares, it is still a high risk to go that route. Standard FTP access uses unencrypted passwords and unencrypted transfers. Proftpd provides the ability to use more secure mechanisms (SFTP/SSL/TLS), I can't guide you on this however, as I only provide access to absolutely uncritical data in very selected directories via FTP. Please have a look on the documentation here: http://www.proftpd.org/docs/ An VPN setup from your outside locations to your router would propably be a much more secure way to provide access. And even then you should carefully consider what to share. PS: As there is a newer version of proftpd with some security fixes available, I'll do a new build on the weekend. Update will be possible through the plugins web interface.

Your isp is changing your ip from time to time and you want some static means to access it? Then get yourself a dyndns service. Check your router on what services it supports and get one of those. (e.g. http://freedns.afraid.org/) Those services will give you a static hostname (e.g. xyz.service.org ) that will be updated to link to your ip, whatever it is at the moment. Your router connects to the service on ip change and registers you new ip. Works fine for me.

Please try the newest version. Clicking the update button on the plugin settings page should be fine.

Well, that shows the ssl package is missing. ^^ I'm sure I tested with a stock unraid and didn't get this error. But I'll have to test it again to be sure. This will take a while I fear. I have a lot of other things to do at the moment. I'll report back as soon as possible, but it'll propably take the whole week to have at deeper look at this. Sorry.