llowForeignAddress</code></a> configuration directive in your
configuration file:
<pre>
   AllowForeignAddress on
</pre>
or <code>proftpd</code> will reject the passive transfer connections and log:
<pre>
  SECURITY VIOLATION: Passive connection from {host} rejected
</pre>

<p>
Note that the use of the server host's DNS name, or its IP address, in the
setting up of the ssh tunnel assumes that the routing of traffic to the
host's own IP address will be short-circuited in the kernel and thus not
actually be t