Configuração NAT para FTP



  • Boa tarde a todos!

    Estou configurando um NAT para liberar uma pasta FTP externamente e está dando a mensagem abaixo:

    Log de teste extraído do site https://ftptest.net/#result

    Warning: Plaintext FTP is insecure. You should use explicit FTP over TLS.
    Status: Resolving address of "IP EXTERNO XXX.XXX.XXX.XX"
    Status: Connecting to "IP EXTERNO XXX.XXX.XXX.XX"
    Warning: The entered address does not resolve to an IPv6 address.
    Status: Connected, waiting for welcome message…
    Reply: 220-FileZilla Server 0.9.60 beta
    Reply: 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
    Reply: 220 Please visit https://filezilla-project.org/
    Command: CLNT https://ftptest.net on behalf of "IP EXTERNO XXX.XXX.XXX.XX"
    Reply: 200 Don't care
    Command: USER winner
    Reply: 331 Password required for winner
    Command: PASS ******
    Reply: 230 Logged on
    Command: SYST
    Reply: 215 UNIX emulated by FileZilla
    Command: FEAT
    Reply: 211-Features:
    Reply: MDTM
    Reply: REST STREAM
    Reply: SIZE
    Reply: MLST type*;size*;modify*;
    Reply: MLSD
    Reply: UTF8
    Reply: CLNT
    Reply: MFMT
    Reply: EPSV
    Reply: EPRT
    Reply: 211 End
    Command: PWD
    Reply: 257 "/" is current directory.
    Status: Current path is /
    Command: TYPE I
    Reply: 200 Type set to I
    Command: PASV
    Reply: 227 Entering Passive Mode (192,168,2,227,19,146)
    Error: Server returned unroutable private IP address in PASV reply

    Segue a configuração que fiz no NAT e no FileZilla:


    Configuração utilizada:

    • Firewall pfSense 2.4.1-RELEASE (amd64)
    • FileZilla Server 0.9.60 beta

    Abraço.





  • Bom dia pessoal!

    Resolvi o problema da seguinte forma, mantive a regra NAT da porta FTP 21 que mostrei na print e criei mais uma com o range de portas configurado no servidor FTP FileZilla, e adicionei o meu IP externo (fixo) na tela de configurações do modo passivo no FileZilla, segue imagem:

    Espero que ajude outros com o mesmo problema!

    Abraço!


Log in to reply