For some reason couldn’t connect to vsftp from “out side”. Today something happened on new software and my workmate must go back to office. That’s a bad idea. But finally, I just solved and figured out why it’s happened. Just because of iptables problems. In .conf file of vsftpd. There’re some configuration lines must be careful. they are look like:


When you active PASV MODE. you MUST accept bits enter or exit via those ports. if not VSFTP will say illegal ports. or 500 error to you. So. you should allow those ports in. From anywhere.

iptables -A INPUT -p tcp –dport xxxxx:yyyyy -j ACCEPT

Particular IP such as aaa.bbb.ccc.ddd

iptables -A INPUT -s -p tcp –dport xxxxx:yyyyy -j ACCEPT