Got the same problem and I use ProFTPD and WinSCP too. Edit the conf file and add the following lines with the letter "i" to insert: pasv_enable=Yes. Replace 1053, 30856, 30857 with your actual ports. I tried some options with 'UFW' on the PI but ended . 10. Install ProFTPD How to configure the passive ports range for ProFTPd on a server behind a firewall Plesk for Windows Server. This is not necessary if you're not using EC2 security group to block connections. Passive FTP & port forwarding - Fortinet Community it is STRONGLY RECOMMENDED that the chosen range be large enough to handle many simultaneous passive connections (for . Active and passive FTP with Docker - p1ngouin.com In some cases you have to specify passive ports range to by-pass firewall limitations. Hi, For file transfers from my PC, I'm using WinSCP Client. Does your ELB need TCP listeners for all of those ports, too? However, if you configure a service or . The default passive port range is 49152-65535 (the IANA registered ephemeral port range). When trying to connect to FTP in IE and can't, go to Tools > Internet Options > Advanced and enable Passive FTP transfers (PASV). Now try ls. # firewall-cmd --add-port=1024-65534/tcp # firewall-cmd --add-port=1024-65534/tcp . # PassivePorts 49152 65534 # If your host was NATted, this option is useful in order to # allow passive tranfers to work. Before we had ufw and just added iptables rules we added a rule that looked like: -A INPUT -m conntrack --cstate ESTABLISHED,RELATED -j ACCEPT. I have the command in my proftpd.conf file "PassivePorts 60000 65535" and I have those ports routed to my linux box using my netgear 4 port wireless router/switch (along with ports 20 and 21). . PassivePorts - ProFTPD PassivePorts restricts the range of ports from which the server will select when sent the PASV command from a client. The 'vsftpd.conf' file was configured like this: pasv_enable=YES pasv_min_port=12000 pasv_max_port=12100 port_enable=YES. If you want to change that, it is set in /etc/proftpd.conf It should not be necessary however, as you shouldn't connect to the internet with this port anyway. However, if you configure a service or . 1. # Port 21 is the standard FTP port. Now your Plesk server accepts passive FTP connections. Note: Allow inbound connections for the passive FTP port range on the firewall. This port will be used later on for the data channel and is different from the port used in this step for the command channel. The ProFTPd documentation has the following to say about the PassivePorts directive: PassivePorts restricts the range of ports from which the server will select when sent the PASV command from a client.