If you run a firewall on your Linux server and want to use passive FTP connections, you have to define the passive port range in pure-ftpd and your firewall to ensure that the connections dont get blocked. The following example is for pure-ftpd on Debian or Ubuntu Linux and ISPConfig 3:

1) Configure pure-ftpd

echo "40110 40210" > /etc/pure-ftpd/conf/PassivePortRange
/etc/init.d/pure-ftpd-mysql restart

2) Configure the firewall. If you use ISPConfig 3 on my server to configure the bastille firewall, you can add the nescessera port range in the ISPConfig firewall settings.

Change the list of Open TCP ports from:

20,21,22,25,53,80,110,143,443,3306,8080,10000

to:

20,21,22,25,53,80,110,143,443,3306,8080,10000,40110:40210

and then click on "Save".

How to set the PassivePortRange in pure-ftpd on Debian and Ubuntu Linux
Tagged on:         

8 thoughts on “How to set the PassivePortRange in pure-ftpd on Debian and Ubuntu Linux

  • Permalink

    Debian* instead of Denian in the title, and need to fix the > to > in the first command. Other than that, great mini tutorial.

    Reply
  • Permalink

    You need to correct the first line of the first command. The Greater than symbol is being output as an unparsed HTML code, I would imagine due to it’s placement in the tag...

    Reply
    • Permalink

      Thanks for the note. The command is displayed correctly now.

      Reply
  • Permalink

    Thx for that short how-to. Just needed the info for pure-ftpd itself. Short and working – perfect. 🙂

    Reply
  • Permalink

    tried
    sudoecho “40110 40210” > /etc/pure-ftpd/conf/PassivePortRange
    but getting
    -bash: PassivePortRange: Permission denied

    Reply
    • Permalink

      You missed to add a whitespace between the words sudo and echo.

      sudo echo “40110 40210” > /etc/pure-ftpd/conf/PassivePortRange

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

*

Ad #native_company# — #native_desc# #native_cta#