Active FTP doesnt work, passive works but only on chrome and firefox.

[vsimoesbh]

Hi Everyone,

I have Pfsense 2.0.1-RELEASE (i386) running with 2 wans interfaces and i cant use the active FTP, the port 20 and 21 are forwarded to my internal FTP server by NAT, the firewall rule is set to allow it but still not working.

The passive FTP works, but only with the filezillia client, on the internet explorer i get a error message, on firefox and chrome i am able to get the files, but in a few clicks, stops working too.

What i do?

My FTP is Filezilla Server.

Thanks for the help.

[Lee Sharp]

You need to configure the client at you end to work with NAT.  It is a limitation in FTP.  Some reading…

http://www.ncftp.com/ncftpd/doc/misc/ftp_and_firewalls.html
http://www.enterprisedt.com/products/edtftpjssl/doc/manual/html/howtoftpthroughafilewall.html

[johnpoz]

I would also suggest some reading.

http://slacksite.com/other/ftp.html

If your forwarding port 20 you clearly don't understand how the ftp protocol works.  In no case would port 20 need to be forwarded.  20 is never used in an unsolicited manner to ftp server, as source port with ftp server creating the traffic - sure.  The state table of the firewall would allow the return traffic, never a reason to forward that port.