vsftpd on multiple ports

Discussion in 'Server Operation' started by falconwmua, Feb 10, 2010.

  1. falconwmua

    falconwmua New Member

    We're trying to run vsftpd to do regular ftp and ftps but our firewall (not iptables) keeps blocking the connects not matter what rules we apply. The Firewall guy wants to split it up with regulare ftp on port 21 and ftps on port 21000 so that we can use 2 different sets of rules. The only way I can think of doing this is to setup 2 different vsftpd configs and services. Any suggestions?
     
  2. Mark_NL

    Mark_NL New Member

    You can run FTP (SSL and TLS) traffic over the same port (21) ..

    If you use Explicit SSL, the connection will be unencrypted until you call "AUTH SSL" or "AUTH TLS" and then starts doing the certificate negotiation etc.

    Implicit SSL gives you the option to bind secure connections on a different port (default 990)
     
  3. falconwmua

    falconwmua New Member

    I currently have it configured that way. But our External Firewall can't handle it. That's why we're wanting to separate it so that we can apply different rules on the different ports.
     
  4. Mark_NL

    Mark_NL New Member

    Then you have to run multiple vsftpd instances, and use different config files for it specifying another port.

    though i still think it's strange that your firewall guy can't get this working. What type of firewall are you running?
     
  5. falconwmua

    falconwmua New Member

    I think its a Checkpoint. I agree about the firewall but we're up against a deadline and I don't have much recourse on calling out the firewall guy. You wouldn't happen to know of a good howto on copying and modifying the service scripts to run that second config?
     
  6. Mark_NL

    Mark_NL New Member

  7. falconwmua

    falconwmua New Member

    Just to make sure I'm not crazy. I can run 2 instances of vsftpd on the same ip listening on different ports correct?
     
  8. Mark_NL

    Mark_NL New Member

    That is correct.
     

Share This Page