Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Ftp passive problem

    Scheduled Pinned Locked Moved General pfSense Questions
    7 Posts 3 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      murilobest
      last edited by

      Hi, i'm with a problem do use ftp in passive mode.

      I trying to connect to a ftp server out of my work in command line. In my work we use pfsense firewall.

      I'm testing in a desktop with an IP with no blocks

      In common ftp works fine, in command line i have this error:

      500 i won't open a connection to "IP"
      425 no data connection

      What can i do?

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        What command line? ftp.exe in Windows? It does not support passive at all.

        1 Reply Last reply Reply Quote 0
        • M
          murilobest
          last edited by

          But problem is… out of my work this passive mode works or if i use one connection that dont pass by pfsense works too

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            As said above, ftp.exe in Windows does NOT support passive FTP at all… Period. Use the FTP client proxy package if you are on 2.2 and using retarded FTP clients. Also, kindly read this:

            https://doc.pfsense.org/index.php/FTP_without_a_Proxy
            http://slacksite.com/other/ftp.html

            1 Reply Last reply Reply Quote 0
            • M
              murilobest
              last edited by

              i dont understand…
              the problem is...
              i tying to connect to a ftp server OUT of my work i have to use command lines

              ftp>
              open> ...

              and with pfSense on my network does not work .. if I connect through a link directly without going through pfSense works

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                I understand you perfectly fine. Read the links above. Use the FTP client proxy package on 2.2, or get a non-retarded CLI client that handles passive.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  As dok has mentioned if your using the windows cmd line ftp, it has NEVER supported passive.  So you must of been using active, pfsense before 2.2 had a ftp proxy/helper that would of helped with that.

                  Now there is none, use the new package if you need active connections to work.

                  In a passive connection the server sends you the port to connect to and the client connection.  Unless your filtering outbound traffic from the client there would be no issues in using passive from a client behind pfsense to a server on the public internet or on then wan side of pfsense.

                  https://doc.pfsense.org/index.php/FTP_without_a_Proxy
                  Active mode FTP through NAT will not function as that relies on a proxy or similar mechanism. Use Passive mode instead. Another option is the recently added FTP Client Proxy package which leverages ftp-proxy(8) in FreeBSD to allow clients on local interfaces to reach remote FTP servers with active FTP.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.