This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.103-5]Need hints on ftp incoming

Hi folks,
I have a production UTM which has a server on one side running IIS ftp.
The good part is windows ftp connects and allows file transfers.

The sad part is neither filezilla or winscp can maintain a connection because they fail to get the file structure.

I am using a dnat with auto rules. ftp helpers are enabled. I can see some dropped rst packets, there is nothing in the log showing any useful information.

Any hints as to what other ports need to be opened for filezilla and winscp would be very helpful.

Thank you

Ian M

helpful.

This thread was automatically locked due to age.

Parents

0 BarryG over 12 years ago

Hi, the 'extra' ports are because the clients are using PASSIVE ftp mode.

Passive mode should work if the FTP connection helper is enabled, but I've seen cases where the client is behind another firewall which somehow interferes.

Try setting the clients to ACTIVE mode.

After looking at the docs, I agree that FileZilla seems too smart for it's own good.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 12 years ago in reply to BarryG

Hi Barry,
my understanding is the ftp helpers only work with internal to external traffic, not external to internal according to Bob.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 RFCat_vk_01 over 12 years ago in reply to BarryG

Hi Barry,
my understanding is the ftp helpers only work with internal to external traffic, not external to internal according to Bob.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data