To minimize the range of open ports for iptables to allow “Passive” or “PASV” connections

in /etc/proftpd insert:

PassivePorts 60150 60200

Put in under the “Port” entry

then in Iptables rules:

iptables -t filter -A INPUT -p tcp –dport 60150:60200 -j ACCEPT