Transition Technology: Ticket #845: Unneeded FTP server on PuffinServer

hours, totalhours changed

chris — Mon, 13 Apr 2015 11:10:36 GMT

hours changed from 0.0 to 0.25
totalhours changed from 0.0 to 0.25

There is a firewall rule to allow FTP traffic:

iptables -L | grep ftp
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere             ctstate NEW tcp dpt:ftp-data
ACCEPT     tcp  --  anywhere             anywhere             ctstate NEW tcp dpt:ftp

For now I have blocked this:

iptables -A INPUT -p tcp --destination-port ftp -j DROP
iptables -A INPUT -p tcp --destination-port ftp-data -j DROP

I can't a simple way to stop this service running, the config for for it is at /usr/local/etc/pure-ftpd.conf and it uses PAM and this is configured via /etc/pam.d/pure-ftpd.

The iptables rules haven't changed the load it is adding however:

  PID USER      PR  NI  VIRT  RES  SHR S  %CPU %MEM    TIME+  COMMAND
18019 root      20   0 28904  444   52 R    27  0.0   0:00.83 pure-ftpd

This might have to be followed up via a ticket with the BOA project -- it seems like a total waste of resources to be running a service we don't use.

hours, totalhours changed

chris — Mon, 13 Apr 2015 11:37:35 GMT

hours changed from 0.0 to 0.25
totalhours changed from 0.25 to 0.5

There is a ticket from 2011 which says the way to stop it running is to comment out this line:

  if ($COMMAND =~ /pure-ftpd/) {$ftplives = "YES"; $ftpsumar = $li_cnt{$COMMAND};}

In /var/xdrago/proc_num_ctrl.cgi, so I have done that, all done killall pure-ftpd but it is still running:

  PID USER      PR  NI  VIRT  RES  SHR S  %CPU %MEM    TIME+  COMMAND
 3017 root      20   0 28904  444   52 R    29  0.0   0:00.88 pure-ftpd

So I have opened a ticket about it.

hours, status, totalhours changed; resolution set

chris — Wed, 15 Apr 2015 14:26:28 GMT

hours changed from 0.0 to 0.25
status changed from new to closed
resolution set to fixed
totalhours changed from 0.5 to 0.75

The answer to the ticket:

rm -f /usr/local/sbin/pure-config.pl
killall -9 pure-ftpd
remove FTP from _XTRAS_LIST

So I have done 1. and 2., the _XTRAS_LIST variable in /root/.barracuda.cnf didn't contain FTP:

_XTRAS_LIST="PDS CSF CHV"

I have updated the wiki page, see wiki:PuffinServer#pure-ftpd and this matter is now resolved so closing this ticket.