Can't connect to FTP Server behind pfSense


  • Hey there,
    related to the topic my problem is, that i can't connect to my ftp server. The server works pefectly when i'm connecting through the LAN IP, but I can't connect using the external IP and others also cannot connect. I'm not sure but i think there's a problem while I'm using a custom port.

    My Setup contains the Router (192.168.0.1), a client (192.168.0.2) and a server (192.168.0.3). The server contains the ftpd (Port 7539).

    I've done following things to get the server online:

    • Port Forward to the command port and the data portrange
    • Firewall rules are set for this ports to pass
    • Outbound NAT everything is allowed

    The site states showed me following entries:
    tcp  192.168.0.1:80 <- 192.168.0.2:1446  FIN_WAIT_2:FIN_WAIT_2
    tcp 192.168.0.1:80 <- 192.168.0.2:1447 TIME_WAIT:TIME_WAIT
    tcp 192.168.0.1:80 <- 192.168.0.2:1448 FIN_WAIT_2:FIN_WAIT_2
    tcp 192.168.0.1:80 <- 192.168.0.2:1451 TIME_WAIT:TIME_WAIT
    tcp 192.168.0.1:80 <- 192.168.0.2:1453 ESTABLISHED:ESTABLISHED
    tcp [MYIPADDRESS]:7539 <- 192.168.0.2:1450 CLOSED:SYN_SENT
    udp 192.168.0.1:53 <- 192.168.0.2:1034 SINGLE:MULTIPLE
    udp 192.168.0.1:53 <- 192.168.0.3:32771 MULTIPLE:MULTIPLE
    udp [MYIPADDRESS]:62417 -> 85.25.5.69:123 MULTIPLE:SINGLE
    udp [MYIPADDRESS]:54466 -> 217.237.148.70:53 MULTIPLE:MULTIPLE

    Netstat -a on the client shows, that the client has sended a syn packet to the external IP:
    TCP    ***:1456            *******C.dip.t-dialin.net:7539  SYN_GESENDET

    What's configured wrong that the router is showing CLOSED:SYN_SENT and nobody can connect to the server?!


  • As long as the client is configured properly for the custom port as well, shouldn't be a problem (doing the same thing on my setup).  Are you sure you have the correct ports forwarded for passive mode as well?  Is the ftp helper enabled?