Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Apr 2008 07:59:20 +0300
From:      Manolis Kiagias <sonicy@otenet.gr>
To:        Gilles <gilles.ganault@free.fr>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: FTP server behind firewall?
Message-ID:  <4806D928.1070500@otenet.gr>
In-Reply-To: <uidd04l3l76f1gd2bt1f9eq2gcojuctcgp@4ax.com>
References:  <hq9d04lrm3bocphdo0msfnh5pnfved0ar2@4ax.com>	<4806B0A0.7000902@radel.com> <uidd04l3l76f1gd2bt1f9eq2gcojuctcgp@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Gilles wrote:
> On Wed, 16 Apr 2008 22:06:24 -0400, Jon Radel <jon@radel.com> wrote:
>   
>> What control do you have over the firewall?  One of the cleaner
>> solutions would be to run an ftp proxy on the firewall, such as that
>> supplied with pf.  See ftp-proxy(8) or
>> http://www.openbsd.org/faq/pf/ftp.html
>>     
>
> Unfortunately, the router/NAT firewall can be neither replaced nor
> tweaked, since it's a modem/router provided by our ISP.
>
> Actually, we don't necessarily need an FTP. Whatever solution to send
> files is fine, provided I can add this feature in a VB Classic client
> application.
>
>
>   
Running an FTP behind a home DSL router is perfectly possible. You will 
just have to open a range of ports on the router itself eg 25000-25050 
and forward them to your ftp server internal IP address. Then set the 
FTP server to only use these ports for passive transfers.

For example, I am using ftp/proftpd and have this directive in the 
configuration file:

PassivePorts 25000-25050

You will, of course, need to forward port 21 as well.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4806D928.1070500>