On my firewall only opened port 21 and loaded the ip_nat_ftp module. On Mon, 19 Jul 2004 20:30:06 +0200, J.L. Coenders <fedora@xxxxxxxxxxxxxxxx> wrote: > I found that out by googling, but I am not really a firewall hero. > vsftpd allows settings the port range with: > pasv_min_port=<port> > pasv_max_port=<port> > > However, I do not know what ports to choose for this yet and how to set it up > in iptables. > > - Jeroen > > On Monday 19 July 2004 08:18 pm, Alexander Dalloz wrote: > > Am Mo, den 19.07.2004 schrieb J.L. Coenders um 19:26: > > > Ok, I read it... but what to open in iptables and vsftpd now? > > > I can not open all ports above 1024 to allow passive mode. > > > - Jeroen > > > > If you did read carefully the site given, then you know which ports have > > to be open. If you won't open ports >1024 to remote > 1024 ports on the > > server side, you will have to check whether vsftpd allows you to specify > > the passive mode port range. I know proftpd is able to follow such an > > instruction. Maybe you will have to change the ftpd then. > > > > Alexander > > -- > fedora-list mailing list > fedora-list@xxxxxxxxxx > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list >