VSFTPD: how to deny access from outside?

Question

linux

In general, I want to set up a home FTP server with anonymous access to /home, but that access from the Internet is prohibited.
Installed VSFTPD. The config is written like this:

listen=YES
local_enable=NO
anonymous_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/private/vsftpd.pem
utf8_filesystem=YES

And I don’t understand: do I need to enable ufw and prescribe ban rules for ports 20-21? Or is it disabled by default? Ubuntu system. I'm not very strong in Linux.

Answer 1

whether it is necessary to include ufw and prescribe the prohibition rules to the 20-21 port? Or is it disabled by default?

You can easily check this, even if you are not strong in Linux - if access from outside is allowed, then you need to prohibit it, and if not, then you don’t need it.