new server - trouble setting up passive FTP with non-standard port

[jimlongo]

I'm trying to get FTP working on a new almaLinux8 server with a fresh install of cPanel.
I've tried both Pro-FTP and Pure-FTP, but for discussion lets go with Pure-FTP

I want to use Port 55555, with implicit FTPS

cat /var/cpanel/conf/pureftpd/local
PassivePortRange: 50000 56000
Bind 55555

I have that port range open in ConfigServer TCP IN = .... 50000:56000

My FTP connections say `An FTP with TLS/SSL connection to “xxxx” could not be opened because the connection was refused`
Unfortunately I can't find any logs with anything in them.
/home/thisaccount/logs/ is empty, and a search of other logs doesn't indicate the problem.

 

[ffeingol]

I don't believe you can have your Bind port in your passive port range.

 

[jimlongo]

I thought I was previously instructed to do that

FTPS on specific port

I have in my pure-ftp.config # Port range for passive connections - keep it as broad as possible. PassivePortRange 49152 65534 # Force an IP address in PASV/EPSV/SPSV replies. - for NAT. # Symbolic host names are also accepted for gateways with dynamic IP # addresses. ForcePassiveIP...

forums.cpanel.net

 

[cPRex]

I don't see where that previous post says to do that for the Bind port. You'd want to use those high ports for the passive port range, but not for the FTP service itself.

You also will want to ensure that port 21 is open in the system's firewall.

 

[jimlongo]

To be clear I want to disable port 21
I want to enable port 55555 as the sole port
Would this work then?

PassivePortRange 49152 55550
Bind 55555

TCP IN = ....... 49152:55550 , 55555 (remove21)

EDIT: I tested this and it does work.
Thank you.

 

[cPRex]

I'm glad it worked! Yes, as long as the Bind port isn't in the passive range, or being used by another service, you can have your pick.