All of my FTP settings are correct, but not working....

[SidedTech]

Ever since the beginning of October, my CSF has been blocking my FTP connections, active, passive, etc.

It is the usual block, whereas I mean I can log in, but I cannot 'retrieve directory listing'.

I have tried plain FTP

I have the passive port range uncommented within the csf conf file, and it says 30000 50000 as it should.

TCP_IN has 21, etc all ready to go.

I thought I may have done something wrong, so I backup up just my websites, reinstalled cPanel, and CSF and yet the problem is still persisting when CSF is active. I can confirm that when CSF is disabled, FTP works fine.

Thanks for all of your help.

[SidedTech]

Also, I should mention that by allowing my IP address THROUGH (quick allow) the firewall, I am able to access without issue, however I did not need to do this before, and I use an IP that changes periodically, so I was hoping for a fix.

[sawbuck]

"TCP_IN has 21, etc all ready to go."

Not sure what "21, etc." means but TCP_IN & TCP_OUT should list both 20 and 21 - comma separated like other ports.

Allowing your IP is likely overriding the 20,21 port settings.

Confirm that 30000 50000 is written 30000:50000 with the colon in CSF.

If you are dealing with dynamic IPs, check the section "Global Lists/DYNDNS/Blocklists" in the CSF interface or at /etc/csf/csf.conf.

[SidedTech]

"TCP_IN has 21, etc all ready to go."

Not sure what "21, etc." means but TCP_IN & TCP_OUT should list both 20 and 21 - comma separated like other ports.

Allowing your IP is likely overriding the 20,21 port settings.

Confirm that 30000 50000 is written 30000:50000 with the colon in CSF.

If you are dealing with dynamic IPs, check the section "Global Lists/DYNDNS/Blocklists" in the CSF interface or at /etc/csf/csf.conf.

21 etc, means 21 and all other necessary ports are open. ETC meaning et cetera (there is a lot of ports!)

Allowing my IP happened AFTER this problem occurred, I had changed nothing. Allowing my IP is the workaround to the issue.

Yes, 30000:50000 is the way it is currently.

I am not dealing with Dynamic IPs in the sense that it changes that often, but my issue being I do not want to have to let my IP through the firewall if I do not have to. I have never had to do this before, it just started happening at the beginning of October, but CSF has been acting weird.

Thanks for the response, sorry for writing my post improperly.