Fixing TLS for proftpd : CertificateFile IS REQUIRED for TLS to work

2008-08-11 10:19:29 +00:00 · 2008-08-11 10:19:29 +00:00 · 6cae26d956
parent b1b87e06f4
commit 6cae26d956
1 changed files with 6 additions and 0 deletions
--- a/etc/alternc/templates/proftpd/proftpd.conf
+++ b/etc/alternc/templates/proftpd/proftpd.conf
@ -44,6 +44,12 @@ RequireValidShell		off
 TLSRSACertificateKeyFile	/etc/apache-ssl/apache.pem
 TLSRSACertificateFile		/etc/apache-ssl/apache.pem
 TLSEngine                       on
+# Use the IANA registered ephemeral port range
+# If you have a firewall, you should open this portrange 
+# (or change it)
+# since ip_conntrack_ftp cannot decrypt TLS session.
+PassivePorts 49152 65534
+

 <Directory /*>
        DenyAll