hi all,

got a few questions about ftps

im using vsftpd and i have added these lines to the config file so it uses passive ports for the data connections -

pasv_enable=Yes

pasv_min_port=50000

pasv_max_port=50100

i have left the connection port as default ie 21 im pretty sure if you want to use a different port you have to add a line in the config file -

listen_port=2121

and the firewall i nat to my ftp server port 21 and 50000-50100 and client connects straight away to my ftp server from external

so is the ftp server i have made ftps explicit and passive?

can i make it ftps implicit and passive?

i have heard passive is the one to use instead of active as passive you can specify the ports the ftp server to open for the data connections and therefore open the correct ports on the firewall?

what about explicit vs implicit, what one is better to use and can you use them with passive instead of active?

sorry for the confusing question, just want to understand ftp

thanks all

rob