Data ports are allocated to FTP clients on connection so it is difficult to know which port an FTP user might be using when they next connect. To narrow it down a little (for a low usage FTP service) I restricted the port range in /etc/proftpd/proftpd.conf with:
PassivePorts 49152 49252
Let's see how that goes…
