CSF blocks FTP downloads although all necessary ports enabled

[Sarge]

Hello to CSF Community,

After migration to AlmaLinux 9 from CentOS 7 I suddenly met the problem with loading files by ftp (example from shell)

Code: Select all

curl -u user:password 'ftp://example.com/folder1/file1.zip' -o /var/www/html/df/file1.zip
Result
curl: (7) Failed to connect to example.com port 21: Connection refused

When I stop only CSF service (lfd and iptables leave running as is) - everything is OK, file will be downloaded by same ftp command.
Enable CSF service back - and again "Connection refused"
So logically a problem somewhere inside CSF.

VSFTPD configuration

Code: Select all

pasv_enable=YES
pasv_min_port=35000
pasv_max_port=35999
port_enable=YES

CSF configuration

Code: Select all

# Allow incoming TCP ports
TCP_IN = "20,21,25,53,80,110,143,443,465,587,993,995,35000:35999"
# Allow outgoing TCP ports
TCP_OUT = "20,21,25,53,80,110,113,443,587,993,995,35000:35999"

+ no any "country specific" settings

Environment - Almalinux 9 latest, CSF version v14.22 (generic)
Would be very obliged for a hint how to find the root of the problem,
Regards,
Serge