ozzy

I've setup a PC on the internal LAN running an FTP server (not on the default port). Internally it works fine, but externally I ca't get it to accept either PASSIVE or ACTIVE connections.

All I've done on the router is put 1 port forward rule for the port to the internal PC. The PC has full outgoing access, but no matter what client I use it won't accept a DATA connection. It can login, but fails when trying to list the directory of the server.

Any ideas?

ChrisB

Have you tried on port 21 Ozzy?

Sounds like it's to do with the need for a command port + a data port (even on Passive FTP).

http://slacksite.com/other/ftp.html seems reasonably accurate.

jpor

iTrader: (1)

Port 21 is the standard universal ftp port of choice.

ozzy

I know 21 is the std port, but I don't want everyone trying to hammer it.

I did have another router and the ftp worked on port 23 fine, so maybe it's just the way the router handles the traffic.

ozzy

Well port 21 worked (for active connections) only for all of 30mins then gave me the same errors as using the non-std port Nothing changed either end; it just stopped working while I was downloading some files to test it.

ozzy

Think I've sussed it. Need to configure the server to use a limited range of high ports and then make these visible through the firewall.

Or I'll just use SSH

ozzy

port 21 and port 20 (data) work if forwarded onto the internal server with Active-mode clients.