NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Zero1
Dec 24, 2020Aspirant
ReadyNAS ftp session closing early
Hi everyone, I configured an FTP on the NAS yesterday and I am able to browse to it via windows. It was mainly created for my phone system to off load recorded phone calls. We are using a Digium ...
StephenB
Dec 24, 2020Guru - Experienced User
The times are confusing, as for some reason they aren't in order. That makes it hard to know when the scheduled transfers are happening.
Dec 23 18:03:49 Abrahamnew proftpd[14728] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER test: Login successful. Dec 23 13:03:50 mod_tls/2.4.2[14729]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable) Dec 23 13:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened. Dec 23 18:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Preparing to chroot to directory '/home/ftp'
I do suggest disabling ipv6 on both the NAS and the switch - unless your local network is using it.
One issue I am seeing is the anonymous log-in attempts
Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened. Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER anonymous: no such user found from ::ffff:10.0.0.138 [::ffff:10.0.0.138] to ::ffff:10.0.0.70:21
So check that the switch is configured to use a NAS user account in these transfers.
Zero1
Dec 24, 2020Aspirant
Hey,
So NAS and switch never had IPv6 configured but it seems like my PC did which showed up in the logs (double checked my IP address).
I disabled IPv6 from my machine and I believe it was the reason it showed up in the log because I initiated the test of the ftp setting from my PBX.
- Zero1Dec 24, 2020Aspirant
Double checked the time on all my equipment and they are all showing the correct clock. I don't know where this odd time stamp in the log is coming from.
- StephenBDec 24, 2020Guru - Experienced User
Zero1 wrote:
Double checked the time on all my equipment and they are all showing the correct clock. I don't know where this odd time stamp in the log is coming from.
Are you in the EST Timezone (GMT-5)? If so, maybe something is logging GMT, and not local time.
- Zero1Dec 29, 2020Aspirant
Hi,
I am in GMT -5 but I haven't found anything on my network reporting under a different timezone. Any ideas where to look? My switches and firewall are all GMT-5, servers and PC's are all the same timezone as well.
Bigger issue is that my sessions are still closing early. Nothing is being backed as programmed which is troublesome.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!