Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't connect to FTP Server behind pfSense

    NAT
    2
    2
    3.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      irgendwer
      last edited by

      Hey there,
      related to the topic my problem is, that i can't connect to my ftp server. The server works pefectly when i'm connecting through the LAN IP, but I can't connect using the external IP and others also cannot connect. I'm not sure but i think there's a problem while I'm using a custom port.

      My Setup contains the Router (192.168.0.1), a client (192.168.0.2) and a server (192.168.0.3). The server contains the ftpd (Port 7539).

      I've done following things to get the server online:

      • Port Forward to the command port and the data portrange
      • Firewall rules are set for this ports to pass
      • Outbound NAT everything is allowed

      The site states showed me following entries:
      tcp  192.168.0.1:80 <- 192.168.0.2:1446  FIN_WAIT_2:FIN_WAIT_2
      tcp 192.168.0.1:80 <- 192.168.0.2:1447 TIME_WAIT:TIME_WAIT
      tcp 192.168.0.1:80 <- 192.168.0.2:1448 FIN_WAIT_2:FIN_WAIT_2
      tcp 192.168.0.1:80 <- 192.168.0.2:1451 TIME_WAIT:TIME_WAIT
      tcp 192.168.0.1:80 <- 192.168.0.2:1453 ESTABLISHED:ESTABLISHED
      tcp [MYIPADDRESS]:7539 <- 192.168.0.2:1450 CLOSED:SYN_SENT
      udp 192.168.0.1:53 <- 192.168.0.2:1034 SINGLE:MULTIPLE
      udp 192.168.0.1:53 <- 192.168.0.3:32771 MULTIPLE:MULTIPLE
      udp [MYIPADDRESS]:62417 -> 85.25.5.69:123 MULTIPLE:SINGLE
      udp [MYIPADDRESS]:54466 -> 217.237.148.70:53 MULTIPLE:MULTIPLE

      Netstat -a on the client shows, that the client has sended a syn packet to the external IP:
      TCP    ***:1456            *******C.dip.t-dialin.net:7539  SYN_GESENDET

      What's configured wrong that the router is showing CLOSED:SYN_SENT and nobody can connect to the server?!

      1 Reply Last reply Reply Quote 0
      • B
        bgbearcatfan
        last edited by

        As long as the client is configured properly for the custom port as well, shouldn't be a problem (doing the same thing on my setup).  Are you sure you have the correct ports forwarded for passive mode as well?  Is the ftp helper enabled?

        /Brian
        /2.0.1-RELEASE
        built on Mon Dec 12 18:24:17 EST 2011

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.