<![CDATA[2.2 Outgoing FTP]]>Hi,

when i initiate a FTP connection from lan to external through pfsense, i can connect and change directory, but not for example do an "dir".
I took a look at the running ruleset with "pfctl -sr" or take a look at /tmp/ruleset.debug, i cannot find any rule for ftp-proxy …

Is there any trick or button i've forgotten?

Any help?

Thanks,

cm3c

]]>https://forum.netgate.com/topic/75893/2-2-outgoing-ftpRSS for NodeWed, 17 Jun 2026 07:24:12 GMTSun, 16 Nov 2014 12:51:22 GMT60<![CDATA[Reply to 2.2 Outgoing FTP on Sun, 16 Nov 2014 21:03:02 GMT]]>OK.

But:
230 Guest login ok, access restrictions apply.
ftp> ls
500 Illegal PORT rejected (address wrong).

]]>https://forum.netgate.com/post/495926https://forum.netgate.com/post/495926Sun, 16 Nov 2014 21:03:02 GMT<![CDATA[Reply to 2.2 Outgoing FTP on Sun, 16 Nov 2014 20:41:46 GMT]]>We don't use ftp-proxy, there is a built-in in-kernel FTP proxy.

]]>https://forum.netgate.com/post/495921https://forum.netgate.com/post/495921Sun, 16 Nov 2014 20:41:46 GMT<![CDATA[Reply to 2.2 Outgoing FTP on Sun, 16 Nov 2014 20:35:57 GMT]]>Thats no choise.
The Software which establishes the FTP connection has no option for changing active/passive.
Just wonder why there are no rules loaded to PF for the ftp-proxy?

Is there no way in the GUI to setup the rules like i would do in pf.conf (openBSD)?:

#snip
anchor "ftp-proxy/*"
rule

#snip

Any tip from insiders?

]]>https://forum.netgate.com/post/495918https://forum.netgate.com/post/495918Sun, 16 Nov 2014 20:35:57 GMT<![CDATA[Reply to 2.2 Outgoing FTP on Sun, 16 Nov 2014 14:55:51 GMT]]>Have you tried passive mode? After connecting, issue the command PASV.

]]>https://forum.netgate.com/post/495895https://forum.netgate.com/post/495895Sun, 16 Nov 2014 14:55:51 GMT