This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ftp Server Full nat not working

Hi All

I am using Full Nat to publish internal FTP server ( sophos utm is not default GW for servers that is why it must be full nat) but it is not working. FTP Helper is enabled .

Do you have any ideas why this setup doesn't work?

Any-FTP-External WAN

Source translation - Internal LAN of Sophos UTM

Destination translation - FTP Server

For HTTPS this kind of setting is wotking.

This thread was automatically locked due to age.

0 BAlfson over 9 years ago

Does anything in #3 through #5 in Rulz help?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 ThorstenSult over 9 years ago

Traffic Source: any
Traffic Service: ftp
Traffic Destination: external address
Nat mode: full
Destination: host definition of the ftp-server private address
Destination Service: leavy empty
Source: internal address
Source service: leave empty
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago in reply to ThorstenSult

What about #3 and #4?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 DraganPenkov over 9 years ago in reply to ThorstenSult

Yes i did it like that. I have same full Nat rule to same server only with HTTP and it is working. I think that also answers BAlfson question because it is all the same in both rules only service is different- HTTP working FTP not.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

I just noticed that you are new here, Dragan - welcome to the UTM Community!

I also see now that you wrote "Source translation - Internal LAN of Sophos UTM" and that should be "Internal (Address)" instead of "Internal (Network)." Was that the problem?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 DraganPenkov over 9 years ago in reply to BAlfson

Thanks.
It is Internal(Address) i was not precise in my post .As i said same rule -clone only with HTTP as service is working only when service is FTP the rule is not working so it must be something connected with FTP passive mode and connection helper. Do anybody have any experience with this FTP helper is it working as it should?

BR
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago in reply to DraganPenkov

Aha - I didn't read your initial post closely enough! The FTP Connection Helper is for internal clients accessing servers outside their subnet, not for inbound traffic. Does trying #1 in Rulz give you any information we might use?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel