Bind в proftpd

There is one last configuration directive about which an administrator should know: SocketBindTight. By default, the proftpd daemon will listen on all addresses, port 21, for the connection requests of remote clients. Sometimes, the administrator may wish to have the proftpd daemon listen only on the IP addresses for which it has been configured, and not every address. To accomplish this, simply use the SocketBindTight configuration directive:

  SocketBindTight on

This configures the daemon to "bind tightly" only to those IP addresses to which it has been configured to listen, rather than every address. By default, the proftpd daemon will listen to every address on the host machine.

Я добавил в # Main Server Options

ServerName "FTP Server" ServerType standalone DefaultServer on Bind 10.16.1.5 SocketBindTight on

и перезапустил proftpd.

теперь sockstat вместо *:21 показывает

192.168.1.250:21 10.16.1.5:21

и все равно слушает на обоих

как оставить только на 10.16.1.5 ???

Пропиши Listen IP