FTP server on OPT1 in passive mode - possible?

[jeppe67]

I got a public FTP server on opt1(DMZ) that I can´t seem to get to work correctly in passive mode whatever I do. I got it working in active mode with no problems, but passive mode is behaving strange. Passive mode works for a while, but after a certain number of files it hangs. It looks like there are more than a 100 open connections between the client and server. I would probably not have noticed this problem with "normal" ftp use, but as we got a library of several thousand fairly small product pictures that our clients need to access and download it´s creating a problem. Large files and downloading a few files in passive mode works without problems. The same FTP-server worked previously in passive mode with pfSense 1.2.3 for transfering large numbers of small files.

Any educated guess what could cause this?

What is the correct way to setup a FTP server in passive mode on OPT1 in 2.0 Beta? What does the talked about FTP-helper actually do?

Thanks,
Jesper

[eri--]

Can you take a snapshots of the states related to the two peers?

[jeppe67]

I sent a copy of the states to Ermal and now with the snap from the 18th of November I got both active and passive mode working with our FTP-server. I doesn´t work if the FTP-server answers passive requests with the external IP of the WAN I/F as I originally thought it should be setup, then it transfers 6-10 files and then stops and time out. I´m still a little fuzzy about what´s the proper configuration to get this going from the start, but now it works and I´m happy. I transfered a few thousand small jpegs in both passive and active mode without any problems.

Thanks for the help Ermal!