diff --git a/vsftpd-2.0.6-listen.patch b/vsftpd-2.0.6-listen.patch
new file mode 100644
index 0000000..d2d6706
--- /dev/null
+++ b/vsftpd-2.0.6-listen.patch
@@ -0,0 +1,24 @@
+diff -up vsftpd-2.0.6/tunables.c.listen vsftpd-2.0.6/tunables.c
+--- vsftpd-2.0.6/tunables.c.listen      2008-03-31 22:28:07.000000000 +0200
++++ vsftpd-2.0.6/tunables.c     2008-03-31 22:28:25.000000000 +0200
+@@ -39,7 +39,7 @@ int tunable_userlist_deny = 1;
+ int tunable_use_localtime = 0;
+ int tunable_check_shell = 1;
+ int tunable_hide_ids = 0;
+-int tunable_listen = 0;
++int tunable_listen = 1;
+ int tunable_port_promiscuous = 0;
+ int tunable_passwd_chroot_enable = 0;
+ int tunable_no_anon_password = 0;
+diff -up vsftpd-2.0.6/vsftpd.conf.5.listen vsftpd-2.0.6/vsftpd.conf.5
+--- vsftpd-2.0.6/vsftpd.conf.5.listen   2008-03-31 22:38:00.000000000 +0200
++++ vsftpd-2.0.6/vsftpd.conf.5  2008-03-31 22:38:24.000000000 +0200
+@@ -265,7 +265,7 @@ not be run from an inetd of some kind. I
+ run once directly. vsftpd itself will then take care of listening for and
+ handling incoming connections.
+ 
+-Default: NO
++Default: YES
+ .TP
+ .B listen_ipv6
+ Like the listen parameter, except vsftpd will listen on an IPv6 socket instead
diff --git a/vsftpd.spec b/vsftpd.spec
index bb27bca..43d36ef 100644
--- a/vsftpd.spec
+++ b/vsftpd.spec
@@ -3,7 +3,7 @@
 Summary: Very Secure Ftp Daemon
 Name: vsftpd
 Version: 2.0.6
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: GPL
 Group: System Environment/Daemons
 URL: http://vsftpd.beasts.org/
@@ -43,6 +43,7 @@ Patch34: vsftpd-2.0.5-underscore_uname.patch
 Patch35: vsftpd-2.0.5-uname_size.patch
 Patch36: vsftpd-2.0.5-greedy.patch
 Patch37: vsftpd-2.0.6-userlist_log.patch
+Patch38: vsftpd-2.0.6-listen.patch
 
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 %if %{tcp_wrappers}
@@ -100,6 +101,7 @@ cp %{SOURCE1} .
 %patch35 -p1 -b .uname_size
 %patch36 -p1 -b .greedy
 %patch37 -p1 -b .userlist_log
+%patch38 -p1 -b .listen
 
 %build
 %ifarch s390x
@@ -158,6 +160,9 @@ fi
 %{_var}/ftp
 
 %changelog
+* Mon Mar 31 2008 Martin Nagy <mnagy@redhat.com> - 2.0.6-3
+- set option listen to default to YES
+
 * Mon Feb 25 2008 Martin Nagy <mnagy@redhat.com> - 2.0.6-2
 - fix init script (#431452)
 - make the init script LSB compliant (#247093)