<![CDATA[I'm pulling my hair out!!!]]>OK… FTP... I've searched and searched and I'm ten times more confused now on what the CORRECT settings are supposed to be to get it to work!?!

Yes, I've read through: http://devwiki.pfsense.org/FTPTroubleShooting and http://forum.pfsense.org/index.php/topic,7096.0.html AND a mess of other posts... nothing has yet worked!

I have a public VIP that's PARP, that's not the public router IP.
I've tried enabling/disabling in every possible combination the FTP Helper on both interfaces.
and I made sure to create the NAT and Rules AFTER enable/disable FTP Helper.
I've port forwarded 21 only.

I can FTP out (LAN -> Internet) ok from the begining...BUT I have yet to be able to FTP in (internet -> LAN)

The FTP server is CentOS running VSFTPd.

Can someone help me? Let me EXACTLY what is needed to get FTP in to work????

I need some majic!

Thanks!

]]>https://forum.netgate.com/topic/8681/i-m-pulling-my-hair-outRSS for NodeSat, 06 Jun 2026 10:35:33 GMTWed, 30 Apr 2008 23:38:46 GMT60<![CDATA[Reply to I'm pulling my hair out!!! on Thu, 01 May 2008 21:57:03 GMT]]>WOOOOOOHOOOOOOO!!!!!!!!!!!!!!!!!!!!!!!

WORKED LIKE A DREAM!!!
WORKS GREAT!

THANK YOU!

]]>https://forum.netgate.com/post/172788https://forum.netgate.com/post/172788Thu, 01 May 2008 21:57:03 GMT<![CDATA[Reply to I'm pulling my hair out!!! on Thu, 01 May 2008 18:44:51 GMT]]>AFAIK, you only need a CARP VIP if you are running the FTP helper on the WAN interface.
I've had good results running with the helper disabled, restricting the PASV ports on the FTP server, and forwarding the PASV ports. With vsftpd, you need to add pasv_min_port and pasv_max_port options to your config file.

]]>https://forum.netgate.com/post/172762https://forum.netgate.com/post/172762Thu, 01 May 2008 18:44:51 GMT<![CDATA[Reply to I'm pulling my hair out!!! on Thu, 01 May 2008 18:13:33 GMT]]>Hmmm….made no difference....

]]>https://forum.netgate.com/post/172759https://forum.netgate.com/post/172759Thu, 01 May 2008 18:13:33 GMT<![CDATA[Reply to I'm pulling my hair out!!! on Thu, 01 May 2008 18:09:37 GMT]]>@NoDoze:

I changed the VIP to CARP….but it still doesn't work....any other settings I need...?

Do ALL the VIPs have to be changed over to CARP? Or can just the FTP IP be on CARP?

Just the IP using FTP.

]]>https://forum.netgate.com/post/172757https://forum.netgate.com/post/172757Thu, 01 May 2008 18:09:37 GMT<![CDATA[Reply to I'm pulling my hair out!!! on Thu, 01 May 2008 17:40:31 GMT]]>I changed the VIP to CARP….but it still doesn't work....any other settings I need...?

Do ALL the VIPs have to be changed over to CARP? Or can just the FTP IP be on CARP?

]]>https://forum.netgate.com/post/172748https://forum.netgate.com/post/172748Thu, 01 May 2008 17:40:31 GMT<![CDATA[Reply to I'm pulling my hair out!!! on Thu, 01 May 2008 01:13:52 GMT]]>Use CARP type IP's for virtual ip's, not proxy arp.

]]>https://forum.netgate.com/post/172702https://forum.netgate.com/post/172702Thu, 01 May 2008 01:13:52 GMT