I have a server on centos 8 with firewalld.
Right now, ftp access is open to all ips. I did put:
firewall-cmd --permanent --add-port=21/tcp