I have a legacy app that needs FTP and cannot do SFTP.
My solution is:
- put an FTP server in place using VSFTPD
- configure the firewall to accept port 21 connections only from localhost
- Set up an SSH connection from the client with the legacy app
- Tunnel the FTP through SSH
I'm wondering though if I can configure VSFTPD to ignore connections from anywhere but localhost on its own, in addition to the firewall. Belt and bracers both.