I found that out by googling, but I am not really a firewall hero. vsftpd allows settings the port range with: pasv_min_port=<port> pasv_max_port=<port> However, I do not know what ports to choose for this yet and how to set it up in iptables. - Jeroen On Monday 19 July 2004 08:18 pm, Alexander Dalloz wrote: > Am Mo, den 19.07.2004 schrieb J.L. Coenders um 19:26: > > Ok, I read it... but what to open in iptables and vsftpd now? > > I can not open all ports above 1024 to allow passive mode. > > - Jeroen > > If you did read carefully the site given, then you know which ports have > to be open. If you won't open ports >1024 to remote > 1024 ports on the > server side, you will have to check whether vsftpd allows you to specify > the passive mode port range. I know proftpd is able to follow such an > instruction. Maybe you will have to change the ftpd then. > > Alexander