FTP issues??

sullrich

Maybe someone could shed some light on this….

I'm using version 93.2, if I leave the ftp proxy helper on, I can't get online, so I disabled it on every interface. I also disabled the bouncing feature so I can get online. I can get to my internal server from the outside now with this setup. If I try to ftp to my server from the outside I can't connect.

I tried enabling ftp helper on the WAN or LAN interface and I can't get online from my internal networks. If I disable them I still can't get online until I do a cold reboot.

Makes no sense. All the FTP helpers do is redirect port 21.

thinair

Exactly what I thought, but as soon as I enable it, my msn drops, whatever mp3 stream I'm listening to drops, and I can't get anywhere aside from on my internal network.

So if I have them all disabled, on which interface should I enable ftp helper on only? WAN, LAN, or both?

sullrich

@thinair:

Exactly what I thought, but as soon as I enable it, my msn drops, whatever mp3 stream I'm listening to drops, and I can't get anywhere aside from on my internal network.

So if I have them all disabled, on which interface should I enable ftp helper on only? WAN, LAN, or both?

Well that REALLY makes no sense because even if the filter policy was borked, it doesn't disconnect already connected states.

thinair

any suggestions for me to do/try on my end???

sullrich

@thinair:

any suggestions for me to do/try on my end???

Start from scratch on 0.94 and upgrade to 0.94.2. Do not import any prior configurations.

thinair

Not a bad idea…..ntop doesn't work for me either now since I upgraded, and it won't uninstall, reinstall, etc, etc

sullrich

@thinair:

Not a bad idea…..ntop doesn't work for me either now since I upgraded, and it won't uninstall, reinstall, etc, etc

Seperate issue. Please do not mangle issues in threads as it will kill the flow and make me ignore it.

thinair

FTP worked properly once I did what you suggested with 0.94 and upgrading to 0.94.2 (on 0.94.8, still no issues)

Thanks

Jesse7

@thinair:

Not a bad idea…..ntop doesn't work for me either now since I upgraded, and it won't uninstall, reinstall, etc, etc

ntop was broken on .93.2

sullrich

@Jesse7:

@thinair:

Not a bad idea…..ntop doesn't work for me either now since I upgraded, and it won't uninstall, reinstall, etc, etc

ntop was broken on .93.2

You on the right thread? :P

Jesse7

I quoted from this thread. Sorry it's off topic yeh :).

agismaniax

I have FTP Problem with Dual-WAN.
The connection is very-very slow even I turn-on userland FTP-Proxy.
Need suggestion here.

sullrich

@agismaniax:

I have FTP Problem with Dual-WAN.
The connection is very-very slow even I turn-on userland FTP-Proxy.
Need suggestion here.

Covered many times. Search.

FTP and dual wan is not compatible.

http://faq.pfsense.com/index.php?action=artikel&cat=1&id=142&artlang=en

agismaniax

"Is dual wan compatible with FTP?
Short answer: no.

If you are trying to use the FTP proxy and DUAL wan or Load Balancing this will not work due to the fact that we have to redirect traffic to a userland proxy when the helpers are enabled.

However, the long answer is that you can utilize dual wan ftp if you use a 1:1 or port-forward the large port ranges required by the server which in most cases of newer ftp daemons is configurable."

ok ;)… and how about the long answer? ??? ???

I already use NAT 1:1, Passive FTP (port 55000-60000) and disable userland FTP-Proxy.
Download is slow, but upload is fine.