Passive mode FTP & Firewall

Mikessu · 07-22-2004, 12:27 PM

I'm running small server that I sometimes connect from school or somewhere else. Anyway I've seen that sometimes my friends that have Windows and somekind of personal firewall can't connect my ftp server. When they close the firewall they are able to connect to ftp.

What should I do?

I have this line in ipf.rules:
pass out quick on tun0 proto tcp from any to any port = 21 flags S keep frags keep state

frob23 · 07-22-2004, 12:34 PM

The problem is on their end... the firewall is forcing them to use passive mode.

You really can't do anything to help them. I am not sure which range of ports (if any) they should open to stop this from happening to them but it isn't something you can change.

chort · 07-23-2004, 12:12 AM

To be a bit more clear, it doesn't look like you have a port range open to allow passive connections (you would have to configure that in your FTP daemon's config, and allow the ports through the firewall) and apparently your friends' firewalls are not allowing active FTP, so you're at an impass. The best thing to do would be to figure out what you need to do to configure passive mode for your FTP daemon and allow incoming connections to that port range.