NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ReadyNAS ftp session closing early
Hi everyone,
I configured an FTP on the NAS yesterday and I am able to browse to it via windows. It was mainly created for my phone system to off load recorded phone calls. We are using a Digium Switchvox and when I went to the configure FTP settings, I tested it and it was able to logon successfully and do what was needed.
Now I setup a sync time for it to offload afterhours starting at 5 and nothing happened. Below is the log of the netgear FTP. Maybe someone else can decipher something else I didn't catch.
Thanks in advance and Merry Christmas!
LOG DETAILS
Dec 23 13:01:33 mod_ban/0.5.5[14155]: obtained shmid 0 for BanTable '/ramfs/ftp_ban.tbl'
Dec 23 13:01:33 Abrahamnew proftpd[14156] 10.0.0.70: ProFTPD 1.3.3g (maint) (built Thu Nov 10 2011 10:03:58 PST) standalone mode STARTUP
Dec 23 13:02:30 Abrahamnew proftpd[14469] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Connection from ::ffff:10.0.0.138 [::ffff:10.0.0.138] denied.
Dec 23 13:03:33 Abrahamnew proftpd[14156] 10.0.0.70: received SIGHUP -- master server reparsing configuration file
Dec 23 13:03:34 Abrahamnew proftpd[14156] 10.0.0.70: 10.0.0.70:21 masquerading as 10.0.0.70
Dec 23 13:03:45 mod_tls/2.4.2[14727]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened.
Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER anonymous: no such user found from ::ffff:10.0.0.138 [::ffff:10.0.0.138] to ::ffff:10.0.0.70:21
Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session closed.
Dec 23 13:03:49 mod_tls/2.4.2[14728]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:03:49 Abrahamnew proftpd[14728] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened.
Dec 23 18:03:49 Abrahamnew proftpd[14728] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:03:49 Abrahamnew proftpd[14728] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER test: Login successful.
Dec 23 13:03:50 mod_tls/2.4.2[14729]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened.
Dec 23 18:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER test: Login successful.
Dec 23 18:03:50 Abrahamnew proftpd[14728] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session closed.
Dec 23 18:04:21 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session closed.
Dec 23 13:05:30 mod_tls/2.4.2[14902]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:05:30 Abrahamnew proftpd[14902] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 18:05:30 Abrahamnew proftpd[14902] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:05:30 Abrahamnew proftpd[14902] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Dec 23 18:05:30 Abrahamnew proftpd[14902] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 13:05:48 mod_tls/2.4.2[14903]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:05:48 Abrahamnew proftpd[14903] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 18:05:48 Abrahamnew proftpd[14903] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:05:48 Abrahamnew proftpd[14903] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Dec 23 18:05:48 Abrahamnew proftpd[14903] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 13:06:18 mod_tls/2.4.2[14990]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:06:18 Abrahamnew proftpd[14990] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 18:06:18 Abrahamnew proftpd[14990] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:06:18 Abrahamnew proftpd[14990] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Dec 23 18:06:18 Abrahamnew proftpd[14990] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 13:07:15 mod_tls/2.4.2[15077]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:07:15 Abrahamnew proftpd[15077] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened.
Dec 23 13:07:15 Abrahamnew proftpd[15077] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER anonymous: no such user found from ::ffff:10.0.0.138 [::ffff:10.0.0.138] to ::ffff:10.0.0.70:21
Dec 23 13:07:15 Abrahamnew proftpd[15077] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session closed.
Dec 23 13:07:18 mod_tls/2.4.2[15078]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:07:18 Abrahamnew proftpd[15078] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened.
Dec 23 18:07:18 Abrahamnew proftpd[15078] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:07:18 Abrahamnew proftpd[15078] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER test: Login successful.
Dec 23 13:07:18 mod_tls/2.4.2[15079]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:07:18 Abrahamnew proftpd[15079] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened.
Dec 23 18:07:18 Abrahamnew proftpd[15079] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:07:18 Abrahamnew proftpd[15079] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER test: Login successful.
Dec 23 18:07:19 Abrahamnew proftpd[15078] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session closed.
Dec 23 13:07:33 mod_tls/2.4.2[15080]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:07:33 Abrahamnew proftpd[15080] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 18:07:33 Abrahamnew proftpd[15080] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:07:33 Abrahamnew proftpd[15080] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Wed Dec 23 18:07:33 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 18:07:33 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Wed Dec 23 18:07:33 2020 0 ::ffff:10.0.6.2 96217 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 18:07:33 2020 0 ::ffff:10.0.6.2 96217 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Dec 23 18:07:33 Abrahamnew proftpd[15080] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 13:08:04 mod_tls/2.4.2[15172]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 13:08:04 Abrahamnew proftpd[15172] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 18:08:04 Abrahamnew proftpd[15172] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 18:08:04 Abrahamnew proftpd[15172] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Wed Dec 23 18:08:04 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 18:08:04 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Dec 23 18:08:04 Abrahamnew proftpd[15172] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 18:12:39 Abrahamnew proftpd[15079] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session closed.
Dec 23 18:24:15 mod_tls/2.4.2[15716]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 18:24:15 Abrahamnew proftpd[15716] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 23:24:15 Abrahamnew proftpd[15716] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 23:24:15 Abrahamnew proftpd[15716] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Wed Dec 23 23:24:15 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 23:24:15 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Wed Dec 23 23:24:15 2020 0 ::ffff:10.0.6.2 96442 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 23:24:15 2020 0 ::ffff:10.0.6.2 96442 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Dec 23 23:24:15 Abrahamnew proftpd[15716] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 18:24:29 mod_tls/2.4.2[15804]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 18:24:29 Abrahamnew proftpd[15804] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 23:24:29 Abrahamnew proftpd[15804] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 23:24:29 Abrahamnew proftpd[15804] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Wed Dec 23 23:24:29 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 23:24:29 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Dec 23 23:24:29 Abrahamnew proftpd[15804] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 18:25:33 Abrahamnew proftpd[14156] 10.0.0.70: received SIGHUP -- master server reparsing configuration file
Dec 23 18:25:33 Abrahamnew proftpd[14156] 10.0.0.70: 10.0.0.70:21 masquerading as 10.0.0.70
Dec 23 18:31:56 mod_tls/2.4.2[17285]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 18:31:56 Abrahamnew proftpd[17285] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 23:31:57 Abrahamnew proftpd[17285] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 23:31:57 Abrahamnew proftpd[17285] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Wed Dec 23 23:31:57 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 23:31:57 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Dec 23 23:31:57 Abrahamnew proftpd[17285] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
Dec 23 18:34:14 mod_tls/2.4.2[17515]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable)
Dec 23 18:34:14 Abrahamnew proftpd[17515] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session opened.
Dec 23 23:34:14 Abrahamnew proftpd[17515] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): Preparing to chroot to directory '/home/ftp'
Dec 23 23:34:14 Abrahamnew proftpd[17515] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): USER test: Login successful.
Wed Dec 23 23:34:14 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ i r test ftp 0 * c
Wed Dec 23 23:34:14 2020 0 ::ffff:10.0.6.2 44 /home/ftp/Switchvox/FTPTEST b _ d r test ftp 0 * c
Dec 23 23:34:14 Abrahamnew proftpd[17515] 10.0.0.70 (::ffff:10.0.6.2[::ffff:10.0.6.2]): FTP session closed.
30 Replies
Replies have been turned off for this discussion
The times are confusing, as for some reason they aren't in order. That makes it hard to know when the scheduled transfers are happening.
Dec 23 18:03:49 Abrahamnew proftpd[14728] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER test: Login successful. Dec 23 13:03:50 mod_tls/2.4.2[14729]: using default OpenSSL verification locations (see $SSL_CERT_DIR environment variable) Dec 23 13:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened. Dec 23 18:03:50 Abrahamnew proftpd[14729] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): Preparing to chroot to directory '/home/ftp'
I do suggest disabling ipv6 on both the NAS and the switch - unless your local network is using it.
One issue I am seeing is the anonymous log-in attempts
Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): FTP session opened. Dec 23 13:03:45 Abrahamnew proftpd[14727] 10.0.0.70 (::ffff:10.0.0.138[::ffff:10.0.0.138]): USER anonymous: no such user found from ::ffff:10.0.0.138 [::ffff:10.0.0.138] to ::ffff:10.0.0.70:21
So check that the switch is configured to use a NAS user account in these transfers.
Hey,
So NAS and switch never had IPv6 configured but it seems like my PC did which showed up in the logs (double checked my IP address).
I disabled IPv6 from my machine and I believe it was the reason it showed up in the log because I initiated the test of the ftp setting from my PBX.
Double checked the time on all my equipment and they are all showing the correct clock. I don't know where this odd time stamp in the log is coming from.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
