Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FTP outbound

    Scheduled Pinned Locked Moved NAT
    2 Posts 2 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      beto_rvs
      last edited by

      Hi,

      I need a permit access a external FTPs for my LAN, and I use a PFSense 1.2.3 and I read various posts a respect and don´t work yet.

      I use ftp helper in both interfaces [WAN, LAN and WAN2(OPT1)], I permit my clients (LAN) ports TCP 20 and 21. And It´s not work.

      When I permit access full (tcp any) to a server-ftp (external) It´s works. In firewall logs, I found (passive ftp connect) traffic in high ports tcp (example: 19000, 51000) for ftp-server (external).

      When I connect I receive this message: "500 I won't open a connection to 192.168.0.5 (only to 200.200.200.2)"

      Anybody help?

      1 Reply Last reply Reply Quote 0
      • E
        EddieA
        last edited by

        If all you need is access to an external FTP server, and don't run one in your local network, then all you should need is the helper on the WAN.  Nothing else.

        Update

        Actually, thinking about it, you might not even need that.  I'm just not sure how the firewall knows to allow the incoming data connection, on an active FTP session, where it should normally block the connection.  A passive FTP session doesn't need any firewall rules.

        Cheers.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.