Parallels Virtualization and Automation Software

RESOLUTION

PassivePorts directive is used in /etc/proftpd.conf file to specify passive ports range. Place it into 'Global' container, like:

</Global>
.....
.....
PassivePorts 57000 58000
</Global>

See ProFTPd documentation for more information regarding PassivePorts directive: http://proftpd.org/docs/directives/linked/config_ref_PassivePorts.html.

Next, ip_conntrack_ftp module should be loaded in the system:


And the iptables should be configured in the following way:


If the server is beind NAT, ip_nat_ftp module also should be loaded:


To keep the changes after the system boot, the modules should be added into /etc/sysconfig/iptables-config,  to IPTABLES_MODULES line, space separaetd.