Issue FTP not working with Plesk Firewall

[backofficeitalia]

Hi,
i activated Plesk firewall with default option but i have a little problem with the FTP access.
I can log-in but is impossible to read the folder list.

How can i open port 20 and 21 vs a public IP client?
Have i to do this from SSH or from Plesk settings?

Thank you very much,
Best regards.

 

[MarkM]

Run these via CLI;

iptables -A INPUT  -p tcp -m tcp --dport 20 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT -m comment --comment "Allow ftp connections on port 20"
iptables -A OUTPUT -p tcp -m tcp --dport 20 -m conntrack --ctstate ESTABLISHED -j ACCEPT -m comment --comment "Allow ftp connections on port 20"
iptables -A INPUT  -p tcp -m tcp --dport 21 -m conntrack --ctstate ESTABLISHED,NEW -j ACCEPT -m comment --comment "Allow ftp connections on port 21"
iptables -A OUTPUT -p tcp -m tcp --dport 21 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT -m comment --comment "Allow ftp connections on port 21"
iptables -A INPUT  -p tcp -m tcp --sport 1024: --dport 1024: -m conntrack --ctstate ESTABLISHED -j ACCEPT -m comment --comment "Allow passive inbound connections"
iptables -A OUTPUT -p tcp -m tcp --sport 1024: --dport 1024: -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT -m comment --comment "Allow passive inbound connections"

 

[backofficeitalia]

Hi,
have i to do it just logged in in SSH?
Best regards.

 

[ChristophRo]

you may wann check if the nf_conntrack_ftp module is loaded on your system

 

[backofficeitalia]

Hi,
have i to follow this thread? How to configure passive ports range for ProFTPd on a server behind a firewall?

Best regards.

 

[Bitpalast]

Hi,
have i to follow this thread? How to configure passive ports range for ProFTPd on a server behind a firewall?

Best regards.

Yes, that is the solution you are seeking.

 

[Martin73]

I have exactly the same probleme. After the upgrade to version 17.8.11 I've installed the Plesk firewall. Since this time I can't connect via FTP and SSH.

The necessary firewall rules were automatically enabled:
FTP server passive ports
FTP-Server
SSH-Server

I don't understand this.