Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem.

On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical configurations, and binding to a high port, the transfer works. Using the identical configurations on a non GRSEC kernel works.

However, I both need the default ftp ports & grsec.

I have contemplated using iptables REDIRECTs to transparently map the default port to a higher port, but this doesn't work in IPv6 due to the removal of the NAT functionality.

I look forward to suggestions.

share|improve this question

1 Answer 1

Try to add a new rule (or modify an existing one) similar to this one to your grsecurity configuration file:

subject /path/to/vsftpd
bind 0.0.0.0/0:21 stream tcp
bind 0.0.0.0/0:1024-65535 stream tcp
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.