Can't connect to FTP FileZilla Server behind Sophos XG Firewall

Hi,

Where is the file server located in relation to where you are trying to connect from?
ian

Hi ian,

The file server is the ftp server itself, which I have installed FileZilla Server. How to solve it?

Thank you, but you did not answer the question.

Please provide a drawing of the connection setup.

Ian

Internet --> Sophos XG Firewall (172.16.16.1) --> (172.16.16.2) MikroTik routing only (192.168.1.1) --> FTP server WIndows 7 (192.168.1.204)

How to solve it?

Put the router into routing mode, not firewall mode.

ian

Put the router into routing mode, not firewall mode.

ian

Yes, the MikroTik routing is just a routing, no firewall function.

Why does it have an IP address, that is different to the XG address range and why does the server have an IP address from router?

Ian

Yes because FTP server is inside LAN, if the FTP server does not have IP address then how the server talks to others?
Of couse it is different to XG address range, because already routed by MikroTik router

I just noticed that I can FTP ls folder, upload and download successfully from FileZilla client, but not from command, why?

If I use Windows command ftp, it cannot ls and cannot upload
But if you use FileZilla, I can list folder, can upload and can download.

Why? How to solve so I can ftp from Windows command?

I think I have found the answer, Windows command ftp does not support passive mode, it just active mode

FTP supports two different modes. SFOS does support both in a interactive mode. So if you have a firewall rule on port 21, it will allow the traffic. It should be able to find the port, which the application opens after this. Check the documentation of FTP: https://en.wikipedia.org/wiki/File_Transfer_Protocol#Communication_and_data_transfer See passiv mode. 

Passiv mode will open another port, which both parties agreed on. The firewall should be see this. Try to enable FTP scanning on the Port 21 firewall rule and disable the FTP bounce protection. 

LuCar Toni can you please guide how to disable? Is this command correct? set advanced-firewall ftpbounce-prevention data