Quick VSFTPD performance Question

HavocStyles · 11-19-2008, 01:03 PM

Can anybody think of any issues running only 2 ports open in passive mode i.e.10000 & 10001 in VSFTPD? Or should a range of ports i.e. 10000 - 11100 be opened up? I want to keep as many exposed ports closed as possible, and traffic should not be that heavy to the server in question. Just would like what other people think about this, such as security and performance aspect etc...

Thanks in advance and for your time.

Cheers,
Eric

web_janitor · 11-20-2008, 11:07 PM

I am no expert but here are my thoughts:

Speed-wise, I don't think there is any difference between either method. However, it seems to me that the first method will allow only 2 open connections at a time. The second method will allow more than 2 connections. The more connections vsftpd has to deal with, the slower it could become.

But if you are comparing one single connection on either the first method or the second method, then performance should be equal.