Passive FTP and Dual WAN



  • Hello,

    I managed to setup dual wan and everything is working okay except passive ftp.

    I'm trying to connect to a FTP server in the internet. I made a LAN firewall rule like this, where * is the default line (WAN) - Rules are on top of the lists.

    TCP LAN net 21 (FTP) * 21 (FTP) *

    Even tried with OPT1, but doesn't work. I followed this advice here http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing#FTP.2FNAT-Reflection_Workaround

    Still doesn't work and here is what the ftp servers tells me when connecting:
    PORT 192,168,1,30,128,41

    500 I won't open a connection to 192.168.1.30 (only to 'my_external_IP_here')

    Also when I connect different times my_external_IP gets changed as its load balancing. I want to use ftp traffic only with OPT1.
    Searching forums i found only workaround for local ftp server.



  • @h8r:

    TCP LAN net 21 (FTP) * 21 (FTP) *

    Even tried with OPT1, but doesn't work. I followed this advice here http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing#FTP.2FNAT-Reflection_Workaround

    You quite the right source. just add the rule like described there at the very top of your rules. The rule you created won't help as FTP is not only port 21. Delete this one, setup the rule like described in the docs and reset states (diagnostics>states, reset states) to make sure there are no old states from previous connection attempts.


Log in to reply