Which firewall rule

postcd

• June 13, 2014 11:34

Firewall CSF blocking FTP connections, i did not received reply on CSF forum so im asking there if anyone can come with idea which rule can cause that? Or if its some whm ftp block? blocking log entry /var/log/messages [QUOTE]Jun 13 11:01:29 myhost kernel: Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=86.134.155.194 DST=107.182.133.29 LEN=52 TOS=0x00 PREC=0x00 TTL=103 ID=27260 DF PROTO=TCP SPT=58975 DPT=47354 WINDOW=8192 RES=0x00 SYN URGP=0

• 

  cPanelMichael

  • June 13, 2014 17:00

  Hello :) Is it blocking FTP access completely? Or, are uploads or another aspect of FTP failing to finish successfully? Thank you.

  0
• 

  quizknows

  • June 13, 2014 18:31

  Looks like you need to open your passive FTP port range in CSF conf.

  0
• 

  postcd

  • June 14, 2014 09:21

  [quote="cPanelMichael, post: 1664531">Is it blocking FTP access completely? Or, are uploads or another aspect of FTP failing to finish successfully?
  only some of the connections are blocked.. :o [quote="quizknows, post: 1664591">Looks like you need to open your passive FTP port range in CSF conf.
  /etc/pure-ftpd.conf contains line: [QUOTE]PassivePortRange 30000 50000
  and in csf config i have this: [QUOTE]TCP_IN = ..someportshere... ,30000:35000
  so i need to modiffy it to 50 000 and restart ftp? isnt this too big range while my ftp conf has maximum 50 simultaneous connections?

  0
• 

  quizknows

  • June 14, 2014 15:47

  You can change one or the other but they need to match. You could just set PassivePortRange 30000 35000 in the pure-ftpd.conf instead of opening the other ports.

  0

Please sign in to leave a comment.