vsftp translation error 500 issue illegal ports

For some reason couldn’t connect to vsftp from “out side”. Today something happened on new software and my workmate must go back to office. That’s a bad idea. But finally, I just solved and figured out why it’s happened. Just because of iptables problems.

In .conf file of vsftpd. There’re some configuration lines must be careful.
they are look like:

pasv_enable=YES
pasv_min_port=xxxxx
pasv_max_port=yyyyy

When you active PASV MODE. you MUST accept bits enter or exit via those ports. if not VSFTP will say illegal ports. or 500 error to you.

So. you should allow those ports in.

From anywhere.

iptables -A INPUT -p tcp --dport xxxxx:yyyyy -j ACCEPT

Particular IP such as aaa.bbb.ccc.ddd

iptables -A INPUT -s aaa.bb.ccc.ddd -p tcp --dport xxxxx:yyyyy -j ACCEPT

EOF

发表评论

电子邮件地址不会被公开。 必填项已用*标注