Page 1 of 3

[Solved] vsftpd setup for outside access

PostPosted: Sun Jun 30, 2013 8:45 pm
by jslick1jim
Hello

I would like too set it up too have 2 users. I have ubuntu lamp server and webmin up and running, with outside access with no ip. works good but i would to be able to get access to privte stuff while on road working or vacation. i have found many how too's they just fall short of working to get outside access.
i had proftp working but not secure. I just did a fresh install of it all. had to i messed it up trying :? one of many. :D From my homework vsftpd is sercure, i hope.

Re: vsftpd setup for outside access

PostPosted: Sun Jun 30, 2013 11:46 pm
by ryanvade
"Very Secure FTP Daemon". If setup correctly you should be fine. The biggest issue is having a Static IP. Or a way to find out the IP when you are out. Because most users have dynamic IPs it is impossible to know what the IP is, which makes it VERY difficult to connect from outside your network. There are services that will redirect your connection to the correct IP, I personally don't trust or know of any specifically. You will also want to enable port forwarding on your router.

Assuming that your home internet connection is ADSL/Cable where your IP address may change, you'll also need to setup some sort of DynamicDNS solution. (no-ip, dyndyn, etc) Some routers have the functionality to handle updates built-in, if yours doesnt there are linux clients which can do it as well.

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 12:34 am
by pam
Most ISP's will block http ports. Ftp ports are open.
Like ryanvade said its next to impossible to get a web server up and that too on dynamic ip. A simple solution would be to purchase a domain name and set up your dns server(+LAMP) with it. A unique domain name gets cached on most servers across the globe. As for broadband wireless, i have no clue whether they allow http services(the one connected to your home computer will be dedicated for server and the one you use on the move gives you internet access). The upload speeds of wireless mobile broadband are crap. If you use cable(any wireline) you are pretty much in good hands...

If you somehow do get it all working, without a domain name, you can be Sure its an open 'naked' network, meaning everyone can access the data on your disks.

Id recommend a freeBSD server against everything linux. Dont get me wrong, Linux is excellent but BSD is secure(enough) and is better committed to hardware with almost zero downtime.

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 12:40 am
by ryanvade
Id recommend a freeBSD server against everything linux. Dont get me wrong, Linux is excellent but BSD is secure(enough) and is better committed to hardware with almost zero downtime.


FreeBSD or Linux with Grsecurity patches. (IE PAX). You can try something like this:
http://www.noip.com/ but it is risky.

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 12:59 am
by jslick1jim
But i have noip.com and thru them i have access to my internal network or should i say server. it works real sweet. :D
I have had this online for last year or so using a noip sub domain. havn't had no troubles than again only handful people have address.

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 2:06 am
by ryanvade
ohhh.

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 2:10 am
by ryanvade
Have you tried just adding new users to your server? How far have you gotten with vsftpd?

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 2:51 am
by tanmay.01
How is your NAT configured or your firewall configured..?
FTP's on linux use passive ftp connection.
ANd are you using ssh..?

Add following to /etc/vsftpd.conf
Code: Select all
connect_from_port_20=YES
pasv_enable=YES
pasv_addr_resolve=YES
pasv_address=myaddress.no-ip.org
pasv_min_port=4242
pasv_max_port=4252

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 11:24 am
by jslick1jim
ryanvade wrote:Have you tried just adding new users to your server? How far have you gotten with vsftpd?



I've had it up and able too connect locally but not outside of my network. i even turned off firewall off well trying.

Re: vsftpd setup for outside access

PostPosted: Mon Jul 01, 2013 11:56 am
by jslick1jim
Ive used this how to http://www.noob2geek.com/linux/setup-vsftpd-debian-ubuntu/
and my router modem is a arris dg860a