Software: Apache. PHP/8.1.30 uname -a: Linux server1.tuhinhossain.com 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC uid=1002(picotech) gid=1003(picotech) groups=1003(picotech),0(root) Safe-mode: OFF (not secure) /usr/share/doc/proftpd-doc/howto/ drwxr-xr-x |
Viewing file: Select action/file-type: ProFTPD: IPv6
ProFTPD has support for IPv6 connections enabled by default. To disable IPv6
functionality at build time, use the proper $ ./configure --disable-ipv6 ...To disable IPv6 support at runtime, use the UseIPv6 directive in your proftpd.conf :
# Disable IPv6 support UseIPv6 offThe DefaultAddress , MasqueradeAddress , and <VirtualHost> directives can take both IP addresses and DNS names as
parameters. If IP addresses are used, either IPv4 or IPv6, they work as one
expects. Things are more involved when a DNS name is given as a parameter.
It is possible for a DNS name to have multiple IP addresses, both <VirtualHost localhost> ... </VirtualHost>on an IPv6-enabled host, would be treated as: <VirtualHost 127.0.0.1 ::1> ... </VirtualHost>Note that MasqueradeAddress does not resolve a DNS
name to all possible addresses. ProFTPD can only masquerade as one
address, and so, if given a DNS name, MasqueradeAddress will use
the first IP address returned by the DNS lookup.
Known Issues
Wildcard Sockets # Listen for all IPv4 AND all IPv6 connections <VirtualHost 0.0.0.0 ::> ... </VirtualHost>
However, on Solaris, binding to an IPv6 address will accept both IPv4 and IPv6
connections to that address automatically. On BSD systems, the behavior
is affected by the
Note that the above are issues only if
Broken Implementations
Badly Parsed DNS names Allow from .eeAttempting to start up ProFTPD with a configuration that contains the above line will fail, with the following error being reported: getaddrinfo '.ee' error: Name or service not known Fatal: Allow: bad ACL definition: '.ee': Success on line 13 of '/path/to/proftpd.conf'The issue is that ProFTPD's ACL parser has to guess, for a given string, whether the string is for an IP address (either IPv4 or IPv6) or a DNS name, which may or may not contain explicit or implicit glob characters. One of the tests that the ACL parser uses is to see if the string contains any characters that cannot appear in an IPv4 or IPv6 address. If the string has any non-IP address characters, it is treated as a DNS name string, otherwise, it is an IP address string. The range of characters which can appear in an IP address string is: 0123456789ABCDEFabcdef.:The string ".ee" contains all characters that are legal in an IP address string; hence why the ACL parser is trying to resolve that IP address, and failing. As a counterexample, ".us" works. One way of working around this issue is to explicitly put glob characters in the string, so that the ACL parser can determine more easily that it is a DNS glob, e.g.: Allow from *.eeNote that this issue only applies if IPv6 support is enabled.
© Copyright 2017 The ProFTPD Project All Rights Reserved |
:: Command execute :: | |
--[ c99shell v. 2.5 [PHP 8 Update] [24.05.2025] | Generation time: 0.0041 ]-- |