No more remote backup since last LTS passage

floown · July 28, 2023, 10:22am

Hello,

I have just upgrade my Ubuntu 20.04 to the last 22.04.
All seems to work.

But I have notice that the backup made in /backup is no more saved by remote FTP.

What can I do now?

Thanks.

//EDIT:

– SUMMARY –
2023-07-28 05:11:20 Rotated: 2023-07-27_05-11-20
2023-07-28 05:11:22 Local: /backup/user.2023-07-28_05-11-20.tar
2023-07-28 05:11:22 Remote: ftp://backup-dc2.online.net/user.2023-07-28_05-11-20.tar
Passive mode address mismatch.
2023-07-28 05:11:43 Size: 1953 MB
2023-07-28 05:11:43 Runtime: 1 minute

eris · July 28, 2023, 10:43am

This is the reason why

floown · July 28, 2023, 3:38pm

Hi.
I have open a ticket. I have ask to my server provider (Scaleway Dedibox Online) and they say me:
« If Hestia can generate a verbose log, can you send it to us, if possible via a zerobin or pastebin URL for readability. »

« It seems that the “data” connection IP address for ftp and the “control” connection IP address for FTP are not the same,
This could be what’s causing the block, and what we should try to allow. »

In fact, I use multiple IP adress in HestiaCP config.

floown · August 1, 2023, 3:36pm

How can I say to HestiaCP (ftp command ?) that it should bypass the passive mode?

I have no progressed with the issue.

Thanks.

//EDIT

# cat /etc/vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
anon_umask=022
anon_upload_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
dual_log_enable=YES
chroot_local_user=YES
# RAJOUT
listen_ipv6=NO
listen=YES
pam_service_name=vsftpd
ftpd_banner=Welcome! Please note that all activity is logged.
userlist_enable=NO
tcp_wrappers=YES
force_dot_files=YES
ascii_upload_enable=YES
ascii_download_enable=YES
allow_writeable_chroot=YES
seccomp_sandbox=NO
pasv_enable=YES
pasv_promiscuous=YES
pasv_min_port=12000
pasv_max_port=12100
max_per_ip=10
max_clients=100
use_localtime=YES
utf8_filesystem=YES
ssl_enable=YES
allow_anon_ssl=NO
require_ssl_reuse=NO
ssl_ciphers=ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
ssl_sslv2=NO
ssl_sslv3=NO
ssl_tlsv1=NO
force_local_data_ssl=NO
force_local_logins_ssl=NO
rsa_cert_file=/usr/local/hestia/ssl/certificate.crt
rsa_private_key_file=/usr/local/hestia/ssl/certificate.key

eris · August 1, 2023, 3:47pm

I don’t think we use vsftpd for backups

github.com

hestiacp/hestiacp/blob/a64126d5fc8fe715b68deb4e6d05fbd2d95b5cfb/func/backup.sh#L65


      
              quote PASS $PASSWORD
              binary
              $1
              $2
              $3
              quit
          EOF
          }
          
          # Defining ftp storage function
          ftp_backup() {
          	# Checking config
          	if [ ! -e "$HESTIA/conf/ftp.backup.conf" ]; then
          		error="ftp.backup.conf doesn't exist"
          		echo "$error" | $SENDMAIL -s "$subj" $email "yes"
          		sed -i "/ $user /d" $HESTIA/data/queue/backup.pipe
          		echo "$error"
          		errorcode="$E_NOTEXIST"
          		return "$E_NOTEXIST"
          	fi

I have really no idea

floown · August 1, 2023, 3:51pm

Ok, I have found an option with ftp command: How to use passive FTP mode in Windows command prompt? - Stack Overflow

Can I edit some file or template in Hestia config?

eris · August 1, 2023, 4:02pm

You need to modify the backup.sh if its works please submit a PR

floown · August 11, 2023, 7:27am

SOLVED : [Bug] Remote FPT and passive mode · Issue #3887 · hestiacp/hestiacp · GitHub

eris · August 11, 2023, 7:34am

So we need to use lftp instead of ftp…

floown · August 11, 2023, 7:51am

If it the solution for several other users, it could be good to adopt it.

system · September 10, 2023, 7:51am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.