Active FTP from opt to LAN network



  • I'm trying to ftp from a host on one of my OPT interfaces to a host on the LAN interface.  Using active mode I can't get a data connection.  My logs show blocks from the source host on OPT to port 20 on my FTP server with a protocol listed of TCP:SA.  Rules allow full access between hosts.  The block reason is

    The rule that triggered this action is:

    @1 scrub in on em0 all fragment reassemble
    @1 block drop in log all label "Default deny rule"

    I've tried disabling the ftp proxy under system tunables, but it didn't make a difference.  Not sure if it really has any impact between interfaces?  I also tried setting my optimization setting down to conservative.

    Running the 2.0 release build from September 2011.

    thanks



  • If you are not using ftp proxy, you need a rule to allow traffic com ftp server source prot 20 to client ip any port.



  • @marcelloc:

    If you are not using ftp proxy, you need a rule to allow traffic com ftp server source prot 20 to client ip any port.

    I have a rule allowing unrestricted access from the server to the client to and from any port

    TCP <server ip="">* <opt subnet="">* * none   allow fs1 to imaging </opt></server>


Log in to reply