TFTP package only works through the GUI
pffan last edited by
I have installed only this one package and while I can upload and download files using the web interface, external clients can do neither. I'd like to be able to push my switch configs to this server but also deploy ip phone config files.
pfsense 2.3.3 (amd64)
tftp package version 0.1.3_1
Data and Voice VLANS on the physical interface. I have been using the Data VLAN to test.
WinAgents ftp client version 2.0b
I can confirm the server is listening on all local addresses using port 69
netstat -a | grep tftp udp4 0 0 *.tftp *.*
To confirm requests are not being blocked, I configured an allow rule on the Data VLAN interface (named 'LAN') to log traffic.
<green check="">May 4 15:52:15 LAN 172.31.X.Y:53476 172.31.X.Z:69 UDP</green>
Client just times out. Default block size is 512 bytes. Target text file is 2KB.
>tftp 172.31.X.Z get testfile WinAgents TFTP Client version 2.0b Copyright (c) 2004-2011 by Tandem Systems, Ltd. http://www.winagents.com - Software for network administrators Transfering file testfile from server in ascii mode... Transferring data from 172.31.X.Z... Error occurred during the file transfer (Error code = 0): Timeout expired. Retries expired.
If the excellent community has any thoughts, I'd love to hear them.
pffan last edited by
My windows firewall was the culprit :-[ because udp is like that and after disabling, I could successfully download testfile with my WinAgents client. Uploading still didn't work, however, which is what brought me down this path in the first place but that was a simple matter of file permissions which I changed through the command line. I understand the risks and am using rules to restrict access to this server.
My suggestions for improving this package:
- Transaction logging. Not sure if –verbosity will do it. If I could see that my get request was being fulfilled, it would have pointed me in the right direction. Besides, it's nice to know who's accessing my files.
- Add a checkbox to enable file creation via –create option
- Add a checkbox to enable file writing without creation enabled via –umask option
I can understand why these options were omitted but still, they'd be nice to have.
Thank you, Doctor, for all your work.
Ethereal last edited by
Could you please provide more details on which R/W file permission you did change ?