ftp_whitelist pre-req needs iptables-persistent intstalled to keep the rules persistent on reboot. apt-get install iptables-persistent