Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Outbound FTP firewall stop?

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 3 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E Offline
      eyewittness
      last edited by

      Hi all,

      I would like to enable outbound ftp. Everytime when i add the rule above and enable it all internet traffic is blocked.
      I'm using a multi wan connection.
      Someone knows whats wrong?

      rules.JPG_thumb
      rules.JPG

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG Offline
        GruensFroeschli
        last edited by

        http://forum.pfsense.org/index.php/topic,7001.0.html

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • E Offline
          eyewittness
          last edited by

          Solution:
          Add this rule
          TCP LAN net 21 (FTP) * 20 - 21 * Allow FTP
          on the wan interface i enabled the ftp helper and on the lan i disabled it.
          So wan ftp helper: unchecked.
          Lan ftp helper: checked.  ;D

          1 Reply Last reply Reply Quote 0
          • N Offline
            nocer
            last edited by

            hmmm…it's multi-wan env so that I wouldn't think ftp helper(ftp-proxy) helps you well...

            if the ftp-proxy works correctly, then you don't need any rules for outgoing ftp because the
            traffic originated from the LAN, pf would keep its state then return traffic comes thru to the
            originator, ftp client(s), on the LAN. That's how nat is done by pf, and how pfSense configured.
            Check out your current rules: /tmp/rules.debug and see how ftp-proxy is configured.

            fyr - http://www.openbsd.org/faq/pf/ftp.html

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.