Can't connect to FTP Server behind pfSense



  • Hey there,
    related to the topic my problem is, that i can't connect to my ftp server. The server works pefectly when i'm connecting through the LAN IP, but I can't connect using the external IP and others also cannot connect. I'm not sure but i think there's a problem while I'm using a custom port.

    My Setup contains the Router (192.168.0.1), a client (192.168.0.2) and a server (192.168.0.3). The server contains the ftpd (Port 7539).

    I've done following things to get the server online:

    • Port Forward to the command port and the data portrange
    • Firewall rules are set for this ports to pass
    • Outbound NAT everything is allowed

    The site states showed me following entries:
    tcp  192.168.0.1:80 <- 192.168.0.2:1446  FIN_WAIT_2:FIN_WAIT_2
    tcp 192.168.0.1:80 <- 192.168.0.2:1447 TIME_WAIT:TIME_WAIT
    tcp 192.168.0.1:80 <- 192.168.0.2:1448 FIN_WAIT_2:FIN_WAIT_2
    tcp 192.168.0.1:80 <- 192.168.0.2:1451 TIME_WAIT:TIME_WAIT
    tcp 192.168.0.1:80 <- 192.168.0.2:1453 ESTABLISHED:ESTABLISHED
    tcp [MYIPADDRESS]:7539 <- 192.168.0.2:1450 CLOSED:SYN_SENT
    udp 192.168.0.1:53 <- 192.168.0.2:1034 SINGLE:MULTIPLE
    udp 192.168.0.1:53 <- 192.168.0.3:32771 MULTIPLE:MULTIPLE
    udp [MYIPADDRESS]:62417 -> 85.25.5.69:123 MULTIPLE:SINGLE
    udp [MYIPADDRESS]:54466 -> 217.237.148.70:53 MULTIPLE:MULTIPLE

    Netstat -a on the client shows, that the client has sended a syn packet to the external IP:
    TCP    ***:1456            *******C.dip.t-dialin.net:7539  SYN_GESENDET

    What's configured wrong that the router is showing CLOSED:SYN_SENT and nobody can connect to the server?!



  • As long as the client is configured properly for the custom port as well, shouldn't be a problem (doing the same thing on my setup).  Are you sure you have the correct ports forwarded for passive mode as well?  Is the ftp helper enabled?


Log in to reply