Linux System Admins Blog

System admins of Promet – an e-commerce, high availability Open Source web shop – share their findings

Linux System Admins Blog header image 4

ASA allow passive ftp traffic

March 17th, 2009 · 3 Comments

Many ftp client will try to establish a passive connection with a server by default. A passive connection will use a high numbered unprivileged port range greater then 1023 (PASV) instead of port 20 (PORT). Most ftp servers specify different ranges that are to be used for passive connections.

[Read more →]

Tags: Security · cisco

vsftpd logging timestamp

December 9th, 2008 · 2 Comments

While investigating some ftp transfers issues we realized that there was something wrong with the logs generated by vsftpd. The timestamps reported in the vsftpd log were wrong, and the fact that they were always 5 hours behind the actual time made us think this was caused by a timezone issue. The system running this [...]

[Read more →]

Tags: CLI · Centos · sysadmin