Home / server / Questions / 369125
In Process
anthonyryan1
Asked: 2012-03-14 01:50:06 +0800 CST

GRSEC Not allowing Active FTP on Privileged ports

  • 772

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem.

On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical configurations, and binding to a high port, the transfer works. Using the identical configurations on a non GRSEC kernel works.

However, I both need the default ftp ports & grsec.

I have contemplated using iptables REDIRECTs to transparently map the default port to a higher port, but this doesn't work in IPv6 due to the removal of the NAT functionality.

I look forward to suggestions.

ftp port grsec

1 Answers

  1. Try to add a new rule (or modify an existing one) similar to this one to your grsecurity configuration file:

    subject /path/to/vsftpd
bind 0.0.0.0/0:21 stream tcp
bind 0.0.0.0/0:1024-65535 stream tcp
    • 0