FTP Helper unsuaul trouble.

konung

Hi, All
I'm having a problem with ftp helper. I already read through the forums but none of the solutions seem to be working for me. Here is the problem. I need to connect to 2 different client/vendor servers.
1. Goes over ftps the other one goes over vpn connections

If I have my FTP helper up then ftps program doesn't work but ftp over vpn works fine. If I bring ftp-helper down my ftps starts working but my ftp over my vpn connection to client stops working. I can't figure out the solution? Can some body give me any ideas?

Reconfiguring / Replacing remote ftp servers or local client provided scripts - is not an option we have no control over that.
But it used work on and old cisco router and sonicwall firewall config. Stopped working after I switched over to pfsense. Well it sort of works but it's a pain in the rear to change your config every time I need to upload reports to clients. ANy help?

DWAyotte

are you using filezilla? if so, you have to specify a range of ports in addition to port 990. This port range also has to be NATd in order for your clients to connect.

konung

hi

Thanks for reply.

Actually I'm using explicit connection on port 21, na dI tried 3 diefferent clients, one command one, filezilla and some other crap - smartftp or something.
Anyways they break at the handshake stage. As soon as i disable ftp helper - it works just fine. But then the other app that uses ftp connection to connecto to a client's server over vpn is not working - and I have not control over it.
I think the other app is jsut using regular ftp over port 21

Delex

Hi konung,

Try this: activate the helper on both WAN and LAN interface. Add a rule on the LAN interface allowing all traffic, all ports to 172.0.0.1, make sure this entry is the 1st in the list.
It solved my problem with ftp connections (multiple WAN). Connections setup by Inet browser,ftp client and cli are all working now.

If you need incoming sessions as wel you'll need to add NAT rules to allow it.

regards