Log inskip to content

Archive for February 21st, 2008

A Long Delay in FTP Connections

Thursday, February 21st, 2008

If you are experiencing a long delay from the time your FTP client connects to your FTP site and when the user prompt appears (or in the case of automated connections, a long hang before the directory listings appear), you may be having a case of Ident [time] Theft.

ProFTPd

To resolve this edit your FTP server’s config file and turn off Ident Lookups.

Open your proftpd.conf (/etc/proftpd.conf - may vary) file in your favorite text editor and look for IdentLookups and replace it with the following:

# Do not perform ident
IdentLookups                    off

If you are a reseller (or run multiple vhosts through ProFTPd) you can set this in each of the virtual hosts config or make it global like so:

<global>
# Do not perform ident
IdentLookups                    off
</global>

IPTables

You can also filter out the requests through iptables using the following:

iptables -A OUTPUT -p tcp --dport 113 -m state --state NEW -j REJECT
--reject-with tcp-reset

Hope this helps!

Categories