search for: pasv_address

Howdy I'm trying to run FTP server behind firewall. And i can't enable passive mode from the Internet. There are plenty howtos but there aren't many with my combination. For now i have configured port forwarding and ftp server itself. On the router: # firewall-cmd --list-all --zone=external external (active) interfaces: enp3s1 sources: services: openvpn ssh ports: 1194/tcp

...le=YES local_umask=022 dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES xferlog_file=/var/log/vsftpd.log xferlog_std_format=YES idle_session_timeout=600 data_connection_timeout=120 ftpd_banner=Welcome listen=YES listen_port=21 pasv_enable=YES pasv_min_port=50000 pasv_max_port=50100 pasv_address=public-ip port_enable=YES pasv_addr_resolve=NO listen_ipv6=NO pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES Connecting from localhost to the local ip with ftp command, I've no problems. If I try to connect from remote host to the ftp server I got some problems. Connecting fro...

On 05/05/2016 06:15 AM, Marcin Trendota wrote: > Also this IP looks weird - shouldn't it be public IP? Yes, it should. Are you using FTPS (FTP with TLS)? You probably need to set the pasv_address option.

I have Centos 5.7 64bit; I have installed vsftpd as standalone service and using it for two years now with no problem. Suddenly; only it works with active mode. The passive mode stops working and gives time out. Firewall is disabled and SELinux is set to permissive. I ran tcpdump and I noticed that only first three packets reached the FTP for passive mode and no more packets on other ports #

...for both active and passive connections and restrict those connections to use ports between 40000 to 60000 The ports 20,21 and 40000 to 60000 on the Linksys router are open, and vsftp is configured with the following options pasv_min_port=40000 pasv_max_port=60000 pasv_address=xxx.xxx.xxx.xxx connect_from_port_20=NO The ftp entry automatically generated the system in /etc/sysconfig/iptables is -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT and to IPTABLES_MODULES entry in /etc/sysconfig/iptabes-config I've added...