Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't connect to FTP server behind pfsense

    Scheduled Pinned Locked Moved NAT
    18 Posts 6 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM
      last edited by

      Yes and yes.

      1 Reply Last reply Reply Quote 0
      • H
        hhajj
        last edited by

        look at the pictures of the settings, what is wrong?

        rule.PNG
        rule.PNG_thumb
        ![ftp server.PNG](/public/imported_attachments/1/ftp server.PNG)
        ![ftp server.PNG_thumb](/public/imported_attachments/1/ftp server.PNG_thumb)

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM
          last edited by

          Your destination ports are wrong.  You specifically asked me if the passive port assignments are for destination ports and I said Yes, then you use something totally different.

          Change Destination Port Range to Custom 65000 to 65050

          1 Reply Last reply Reply Quote 0
          • H
            hhajj
            last edited by

            yes I tried it first but it didn't work!
            any other suggestions

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              The above is absolutely wrong. You need port forwards for BOTH the FTP data port AND the passive ports. What you have will never work.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                dok is correct both your control channel (21), and your passive ports (65000 to 65050 in your screenshot) need to be forwarded.

                Your also going to want to make sure your server is actually handing out the wan IP of pfsense.. Going to be pointless for the client if you hand it back your 192.168.88.44 address in the passive connection.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM
                  last edited by

                  dok is correct both your control channel (21), and your passive ports (65000 to 65050 in your screenshot) need to be forwarded.

                  Funny, I thought I had already told him all that.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    you did, as well as dok clearly state you need both..  And doesn't look like he has his filezilla even handing out its public IP, etc.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM
                      last edited by

                      OK.  For a minute there, I thought I was speaking Chinese or something.

                      1 Reply Last reply Reply Quote 0
                      • H
                        hhajj
                        last edited by

                        the rules are already made!
                        it connects I see it on the log but it reaches a place where it loose the connection.

                        rules.PNG
                        rules.PNG_thumb

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          Dude, wrong again. WTF is 21-71?!  ::) ::) ::)

                          (And, while here, FTP is not using UDP for anything.)

                          1 Reply Last reply Reply Quote 0
                          • H
                            hhajj
                            last edited by

                            Fixed thanks guys.
                            The 21-71 is generated by the system when I chose ftp but i changed it to the ports i want.
                            my first time!
                            Come on!
                            ;)

                            1 Reply Last reply Reply Quote 0
                            • sahanS
                              sahan
                              last edited by

                              same problem here

                              GertjanG 1 Reply Last reply Reply Quote 0
                              • GertjanG
                                Gertjan @sahan
                                last edited by

                                @sahan said in Can't connect to FTP server behind pfsense:

                                same problem here

                                Can't be.
                                No one fires up an FTP server any more these days. It's ancient technology.
                                The Internet has been obliterated by the sheer number of how-to's (setting up an FTP server behind a firewall).

                                Btw : this thread is more then 2 years old. It should be locked.

                                edit : would be nice if some one woke up @doktornotor 👍

                                No "help me" PM's please. Use the forum, the community will thank you.
                                Edit : and where are the logs ??

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  Your 3 posts have been your having issues with ftp - but you have yet to get 1 detail that could actually let us help you.

                                  Your ftp server is where? Where is your client? Are you active or passive?

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.