FTP outbound

[beto_rvs]

Hi,

I need a permit access a external FTPs for my LAN, and I use a PFSense 1.2.3 and I read various posts a respect and don´t work yet.

I use ftp helper in both interfaces [WAN, LAN and WAN2(OPT1)], I permit my clients (LAN) ports TCP 20 and 21. And It´s not work.

When I permit access full (tcp any) to a server-ftp (external) It´s works. In firewall logs, I found (passive ftp connect) traffic in high ports tcp (example: 19000, 51000) for ftp-server (external).

When I connect I receive this message: "500 I won't open a connection to 192.168.0.5 (only to 200.200.200.2)"

Anybody help?

[EddieA]

If all you need is access to an external FTP server, and don't run one in your local network, then all you should need is the helper on the WAN.  Nothing else.

Update

Actually, thinking about it, you might not even need that.  I'm just not sure how the firewall knows to allow the incoming data connection, on an active FTP session, where it should normally block the connection.  A passive FTP session doesn't need any firewall rules.

Cheers.