Allow certain IP’s for services in CSF

Add the following line in your /etc/csf/csf.allow

tcp|in|d=21|s=192.168.x.x
tcp|out|d=21|d=192.168.x.x

Restart csf with : csf -r

This will allow incoming/outgoing connections to port 21