FTP is blocked out why?

alexus

I just found that Pfsense bloked out my outgoing FTP traffic, meaning I can not access any FTP websites on the inernet… and i dont have any firewall ruless to block outgoing port 21!

Why? What happaned here?

sullrich

Search the forum. This has only been brought up 1000 times.

HINT: upgrade to the latest testing version in ~sullrich on pfsense.com.

alexus

here is 1001….
but you dont have embeded snap shot there for beta 1 :-(
what should I do?

sullrich

You didnt even search. Search. I already gave you the hint, its a version in ~sullrich on pfSense.com.

alexus

am I looking at right directory?
http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-1-25-06/

hoba

That is the latest snapshot, yeah. Try it.

alexus

but you dont have embedded version for WRAP there…. should I install regular one?

sullrich

http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-1-25-06/pfSense.img is it.

alexus

Ok thanks, will try that one…
If i fo ofine that mean it didnt work lol

alexus

Nope, no FTP service… fust instalees that latest version... unless i haveto do some extra configs, I can not ccess ftp websites on the internet

arnaud.landry

take a look at /tmp/rules.debug

search "# FTP proxy"
and "rdr"

if ok , you'll see that ftp connection are redirected to another port

(i suppose that cos , i don't konw pf . it's a new product for me too)

so …. just add a rule to permit traffic from lan to 127.0.0.1 on port 8021 or other port like you can see in your file

you'll have something like that
TCP LAN net * 127.0.0.1 8021 * ALLOW / LAN -> WAN / FTP
or
TCP LAN net 1024 - 65535 127.0.0.1 8021 * ALLOW / LAN -> WAN / FTP

good luck

--
arnaud landry
un francais de passage ,o)

alexus

will that gove me regular access to FTP or I will have to use 8021 port for rest of my file?

arnaud.landry

hum …. you will use port 21 to connect to a ftp server that's all

pfsense will redirect this connection to a local ftp proxy on the port indicated in the config file ,

it's completly transparent , but you must create a rule to be allowed to connect to the firewall on his port

alexus

ok will try that setup lter on today.. hope that works