Enable Passive FTP on Plesk 11.x & 12.x
FTP passive mode require some or all unprivileged (1024-65534
) ports to be accessible by the world.
By default Plesk does not add a rule for these ports, so passive mode does not work.
To enable passive mode we need to edit the ProFTPD (FTP server used by Plesk) configuration.
Edit the config file (located here: /etc/proftpd.conf
) with your favorite shell editor (like nano or vim). Find the <global>
section and add the following rule between the <global>
and </global>
tags:
PassivePorts 60000 65534
This changes will tell ProFTPD to use ports 60000-65534
for passive connections. To apply on CentOS run the following to restart the FTP server:
/etc/init.d/xinetd restart
Plesk firewall configuration⌗
Now we will have to add a firewall rule in plesk.
- Login to your plesk panel
- Go to “Server Management” > “Tools & Settings” > “Security” > “Firewall”
- Click on “Modify Plesk Firewall Rules”
- Go to “Add cutom rule”
- Give it a sensible name, something like “FTP Passive ports”
- Set direction to “Incoming”, action to “Allow”
- Add a port range
60000-65534
for TCP - Hit “Ok”
- Click “Apply Changes” > “Activate”
- Check if FTP works with passive mode enabled
- Profit!
Read other posts
comments powered by Disqus