I've added a file "ForcePassiveIP" with an external IP address to the /etc/pure-ftpd/conf directory and also a file "PassivePortRange" to the same directory with two numbers to define the port range. I've restarted the "pure-ftpd-mysql" service, but yet, when I attempt to connect via FTP (and examine what's coming into the server via "tcpdump"), it's complaining that the IP address is unreachable and the packets coming in are not within the passive port range I specified. Pure-ftpd has a strange configuration style - lots of little one-line files - so I'm not sure if just creating the files in the "conf" directory is good enough, or must I specify to it somehow that I want it to use these new settings via another setting?
On Debian and Ubuntu, you create just these files. e.g.; https://www.faqforge.com/linux/cont...ange-in-pure-ftpd-on-denian-and-ubuntu-linux/ And then restart pure-ftpd. You should be able to see the new options that you have set in the command line of the running pure-ftpd daemon, e.g. when you use ps. (at least with init scripts, this was possible). Might be that you can't do that with systemd.
I rebooted the cluster and it just worked. I must have made a wrong setting somewhere, but goodness knows what it was. A cold boot, though, is a good way to clear out the pipes.