FTP Client Proxy Package Problem

Fourbe · Mar 24, 2015, 8:54 AM

Hello

Didn't work for me.

Pfsense upgraded to 2.2.0 last week with FTP client proxy package. Can't back 2.1.5

Testing FTP client to FTP passive server : ko

In french

C:>ftp *****
Connecté à *****
220 ***** Microsoft FTP Service (Version 5.0).
Utilisateur ****:(none)) : ABCD
331 Password required for ABCD.
Mot de passe :
230-Bienvenue sur le serveur FTP ****. < Welcome message
230 User ABCD logged in.
ftp> quote pasv
227 Entering Passive Mode (*****,8,181).
ftp> lcd commandes
commandes: F
ftp> put **.zzz
Connexion fermée par l'hôte distant. < error message, connexion closed by host

FTP client proxy config :

Proxy Enabled
Local Interface LAN
Proxy Bypass Source: my LAN ip
Proxy Bypass Destination : FTP Server WAN IP
Log actived

Rules LAN to WAN :
all port and protocol open from my source to FTP server
no NAT, no WAN to LAN rules for FTP.

I can't connect in activ mode, it's not my FTP server

tx

doktornotor · Mar 24, 2015, 9:39 AM

@Fourbe:

Proxy Bypass Source: my LAN ip
Proxy Bypass Destination : FTP Server WAN IP

Eeeeeeh? That is the PC you are testing from? And the FTP server you are testing? Kindly remove the bypass nonsense you configured there - you made the package useless since the traffic does not go through the proxy at all.

@Fourbe:

I can't connect in activ mode, it's not my FTP server

What? Huh? You are not testing active FTP at all.


ftp> quote pasv
227 Entering Passive Mode (*****,8,181).

Also, if that CLI client is ftp.exe from Windows, it does not support passive mode at all. So, why are you entering the above commands goes completely beyond me.

Overall, you seem to be completely confused. The goal of the package is to make active FTP working from clients behind pfSense. For passive FTP, you do not need the package at all. And you cannot use passive mode with the retarded Windows client.

Fourbe · Mar 24, 2015, 10:24 AM

Tx.
I know ftp.exe is retarded :'(

The software editor provided a .vbs script does this.

Working in PFsense 2.1.5 with Rules Lan to Wan :
All TCP from 'ftp.exe on software server' to tcp port 21 FTP-IP public (ftp.****.org)

Today, didn't work on PFSense 2.2 with Rules lan to Wan :
All TCP from 'ftp.exe on software server' to All TCP FTP-IP public (ftp.****.org)

I've try to use another ftp client (winscp) working in command line but that script make a loop at starting winscp (1000 process)

Put working in WinSCP :(
Working on other soft (Filezilla….)

sorry for my english, French's School are bad

doktornotor · Mar 24, 2015, 10:34 AM

1/ Fix the FTP proxy configuration removing the bypass stuff you got there.
2/ Fix the VBS script do that it does NOT try PASV when it's not supported at all by the client.

Fourbe · Mar 24, 2015, 10:54 AM

1/ ok
2/ tested with quote STOR filename

file was create on FTP but is at 0kb

ftp> quote STOR file
150 Opening ASCII mode data connection for file.

tested with put filename

ftp> put filename
Connexion fermée par l'hôte distant.
ftp>

Connexion closed by host
no file on FTP (view with filezilla)

doktornotor · Mar 24, 2015, 10:59 AM

MS FTP "client" plus MS FTP "server" -> unusable junk. Get something usable, like http://www.ncftp.com/download/