Outbound FTP and CARP/VIP

RyanB · Sep 24, 2008, 3:55 PM

We recently migrated from a single pfSense server to a dual server fail-over CARP/VIP setup.

pfSense1 –-------- CARP/VIP --------- pfSense2
Ext. x.x.x.57 x.x.x.58 x.x.x.59
Int. 192.168.0.240 192.168.0.1 192.168.0.241

I enabled advanced outbound NAT, and created the following rule:
WAN 192.168.0.0/24 * * * x.x.x.58 * No

All traffic I've tested comes out through the assigned external VIP, except for FTP which comes out through the master pfSense box.

Due to vendor IP restrictions, we really need to have FTP connections coming through the VIP, is this possible?

Thanks!

GruensFroeschli · Sep 24, 2008, 6:21 PM

Disable the FTP Helper on the interface config page.

RyanB · Sep 25, 2008, 4:00 PM

Thanks GruensFroeschli, that took care of it!