FTP traffic not going out on WAN

[peterlinuxgeek]

Hi All,

Situation pfSense 2.1 (latest version)

1 nic for ISP1
1 nic for ISP2
1 nic vor LAN
1 nic for 4 DMZ zones (1+3VLANs)
1 nic for wireless

DMZ zones are x.y.20.0/24 VLANs x.y.22.0/24 x.y.26.0/24 & x.y.28.0/24

on x.y.28.2 sits an IBM AS/400 with FTP server.

Can connect from LAN to FTP server and get a file - no problem

Can connect from any place in the world to x.y.28.3 to start FTP, authentication works, cd into dir ok, but when I 'get' a file, it stops.
(switching to passive does not help)

This is now in my firewall
block
Jan 20 22:47:36 DMZxxx28 (source)x.y.28.2:21 (dest)24.64.xx.yy:43541 TCP:FPA

Reason for the block
@5 block drop in log inet all label "Default deny rule IPv4"

There is a rule in DMZxxx28 that allows for this traffic to go out.

Rule in DMZxxx28:
ID Proto  Source  Port Destination Port Gateway Queue
IPv4 TCP/UDP x.y.28.2 * *   * WANisp1GW none

And all this used to work until I rebooted my system 3 days ago…

Since then I have Ticked ON (selected) (In System:Advanced):
Disables the PF scrubbing option which can sometimes interfere with NFS and PPTP traffic.
&
Bypass firewall rules for traffic on the same interface

as suggested by others in this forum, and rebooted the box again, but no luck...

Any other ideas?

thanks

Peter

[peterlinuxgeek]

It's getting worse… Now I get this

The rule that triggered this action is:
@5 block drop in log inet all label "Default deny rule IPv4"

On most traffic going out (ex IMAP on 143 cannot talk to a laptop connected via OpenVPN )

No idea what is triggering this.

Close to cleaning it all up and re-install - although I don't want to do that.

Peter