Solutions

FTP log source failing on a new Reporter virtual machine (ISO image) installation

Solutions ID:    KB4917
Version:    1.0
Status:    Published
Published date:    02/10/2012
 

Problem Description

After installing the Reporter ISO-based virtual machine, you may encounter problems with setting up an FTP log source in Reporter.

The log source either loads and then unloads immediately, or stays stuck in "Processing" status indefinitely.

Resolution

This is caused by restrictive IPTABLES rules in the Reporter Linux environment that prevent passive FTP connections from being established.

 

To permanently allow passive FTP connections perform the following steps:

  1. Log into the Reporter Linux CLI through SSH on port 22 with the "root" username
  2. Run the command "vi /etc/sysconfig/iptables-config" 
  3. Press the "i" key on your keyboard to enter vi INSERT mode
  4. Edit the IPTABLES_MODULES="" line to read IPTABLES_MODULES="ip_conntrack_ftp ip_nat_ftp"
  5. Press the ESC key on your keyboard and type in ":wq" to save the file and exit out of the vi text editor
  6. Run the command "/etc/init.d/iptables restart"

After these steps are completed, log into the Reporter web GUI and reload the FTP log source.

At this point, passive FTP connections will be allowed and the log source will operate correctly.

 

 NOTE: Please ensure your Reporter version is at least 9.3.2.2 as there was a related bug in Reporter 9.3.2.1 with FTP log sources

See the following article for more information on the related bug: KB4918

 


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question