From 4e99397e1d52d9280b2bc28d8308d14b6e3582cf Mon Sep 17 00:00:00 2001
From: Vincent Hennebert <vhennebert@gmail.com>
Date: Feb 23 2018 17:56:51 +0000
Subject: Add section about allowing FTP connections in firewalld


---

diff --git a/en-US/servers/FTP.adoc b/en-US/servers/FTP.adoc
index 5cd276e..d71219b 100644
--- a/en-US/servers/FTP.adoc
+++ b/en-US/servers/FTP.adoc
@@ -112,6 +112,24 @@ To conditionally restart the server, as `root` type:
 
 By default, the [command]#vsftpd# service does *not* start automatically at boot time. To configure the [command]#vsftpd# service to start at boot time, use a service manager such as [command]#systemctl#. See xref:../infrastructure-services/Services_and_Daemons.adoc#ch-Services_and_Daemons[Services and Daemons] for more information on how to configure services in {MAJOROS}.
 
+[[s3-ftp-firewalld]]
+==== Configuring the Firewall for FTP
+By default, `firewalld` blocks incoming FTP connections. To allow FTP connections, as `root` type:
+
+[subs="quotes, macros"]
+----
+[command]#firewall-cmd --add-service=ftp#
+----
+
+The change will be applied immediately, but will be lost next time `firewalld` is reloaded or the system restarted. To make it permanent, type:
+
+[subs="quotes, macros"]
+----
+[command]#firewall-cmd --permanent --add-service=ftp#
+----
+
+For more information on configuring `firewalld`, see the link:++https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/++[Red{nbsp}Hat Enterprise{nbsp}Linux{nbsp}7 Security Guide].
+
 [[s3-ftp-vsftpd-start-multi]]
 ==== Starting Multiple Copies of [command]#vsftpd#
 indexterm:[vsftpd,starting multiple copies of]indexterm:[vsftpd,multihome configuration]