0

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem.

On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical configurations, and binding to a high port, the transfer works. Using the identical configurations on a non GRSEC kernel works.

However, I both need the default ftp ports & grsec.

I have contemplated using iptables REDIRECTs to transparently map the default port to a higher port, but this doesn't work in IPv6 due to the removal of the NAT functionality.

I look forward to suggestions.

anthonyryan1
  • 113
  • 4

1 Answers1

0

Try to add a new rule (or modify an existing one) similar to this one to your grsecurity configuration file:

subject /path/to/vsftpd
bind 0.0.0.0/0:21 stream tcp
bind 0.0.0.0/0:1024-65535 stream tcp
Janne Pikkarainen
  • 31,454
  • 4
  • 56
  • 78