Arch Linux

DenBrahe

Member

Registered: 2016-04-24

Posts: 17

[Solved] Vsftpd: GnuTLS error -15 (unexpected TLS packet) on LIST

I am running Vsftpd on a home server after NAT and with a dynamic external ip address.

From one day on another however, I can't access certain folders anymore, I always get a 'GnuTLS error -15 (unexpected TLS packet received)'.

FileZilla log: http://pastebin.com/dmGUq9LQ
Vsftpd log: http://pastebin.com/4ZY2dDvr
Vsftpd config: http://pastebin.com/Q7efpSHb

The server has a dynamic domain name (ddns), firewall should be correctly configured, port forwarding should be fine.
It only happens with some specific folders, I can access most of the directories just fine.

Permissions info:

755 7   deluge deluge  4096  May  8 17:56 .
755 7   root      root      4096  May 28 23:26 ..
775 2   deluge deluge  4096  Apr 24 18:59 auto-add         # no problems
700 3   deluge deluge  4096  Apr 24 00:18 .config
775 57 deluge deluge  4096  May 30 11:07 downloads     # problematic
700 5   deluge deluge  4096  Apr 26 10:04 .python-eggs
775 2   deluge deluge 12288 May 30 11:06 torrents          # problematic

The users with whom I tried are member of the 'deluge' group.

One last note: when I manually use FTP over ssh on the server, I get this message: '500 OOPS: priv_sock_get_cmd'

Can anyone help me with this?
Thank you very much

Last edited by DenBrahe (2016-06-02 12:25:10)

DenBrahe

Member

Registered: 2016-04-24

Posts: 17

Re: [Solved] Vsftpd: GnuTLS error -15 (unexpected TLS packet) on LIST

I have just disabled SSL in the vsftpd config file, and now another error appeared:

Command:	CWD /srv/deluge/downloads
Response:	250 Directory successfully changed.
Command:	TYPE I
Response:	200 Switching to Binary mode.
Command:	PASV
Response:	227 Entering Passive Mode (*ip*,7,232).
Command:	LIST
Response:	150 Here comes the directory listing.
Response:	500 OOPS: priv_sock_get_cmd
Error:	Failed to retrieve directory listing
Error:	Connection closed by server 

This error is a bit more specific, I'll look into that

EDIT: a quick search showed me the solution (https://bbs.archlinux.org/viewtopic.php?id=147074).
It is as simple as adding

seccomp_sandbox=NO

to the vsftpd configuration file.

Last edited by DenBrahe (2016-06-02 12:24:51)

Chuck Arch Linux

Member

Registered: 2011-06-23

Posts: 81

Re: [Solved] Vsftpd: GnuTLS error -15 (unexpected TLS packet) on LIST

Thanks for sharing the solution, I was searching for that too.

DenBrahe

Member

Registered: 2016-04-24

Posts: 17

Re: [Solved] Vsftpd: GnuTLS error -15 (unexpected TLS packet) on LIST

Thanks for sharing the solution, I was searching for that too.

Well, glad to help you out

irb

Member

Registered: 2014-11-07

Posts: 17

Website

Re: [Solved] Vsftpd: GnuTLS error -15 (unexpected TLS packet) on LIST

I just found this solution as well (thanks!), it would be nice if it were documented in the vsftpd.conf man page.