CentOS Proftpd with TLS (Firewall NAT)

RPM download
http://pkgs.org/download/centos-5-rhel-5/centalt-x86_64/proftpd-1.3.3e-2.el5.x86_64.rpm.html

從Internet穿過Firewall NAT連上FTP server用MasqueradeAddress。
從LAN連上FTP server用VirtualHost。

vi /etc/proftpd.conf
PassivePorts                    60000 60099  # ports for PASV, 防火牆上也須開這些 ports
AllowStoreRestart           on                   # 允許使用者上傳續傳！預設是 off

vi /etc/ftpusers
#root  # allow root login

vi /etc/sysconfig/proftpd
PROFTPD_OPTIONS="-DTLS"  # Enable TLS

Create Certificate for TLS
openssl req -new -x509 -days 3650 -nodes -out /etc/pki/tls/certs/proftpd.pem -keyout /etc/pki/tls/certs/proftpd.key.pem

以Filezilla 3.5.0測試OK。Filezilla會有 "Server sent passive reply with unroutable address. Using server address instead." 的訊息。

參考
http://linux.vbird.org/linux_server/0410proftpd.php
http://www.howtoforge.com/proftpd-tls-debian-etch
http://www.proftpd.org/docs/howto/NAT.html