Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem.

On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical configurations, and binding to a high port, the transfer works. Using the identical configurations on a non GRSEC kernel works.

However, I both need the default ftp ports & grsec.

I have contemplated using iptables REDIRECTs to transparently map the default port to a higher port, but this doesn't work in IPv6 due to the removal of the NAT functionality.

I look forward to suggestions.

share|improve this question

Try to add a new rule (or modify an existing one) similar to this one to your grsecurity configuration file:

subject /path/to/vsftpd
bind stream tcp
bind stream tcp
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.