Can't use ftp client next to FTP server

RouterOS Beginner Basics
1

Hi all,

i have a ftp server running and all is working with the following rules

/ip firewall filter
add action=accept chain=forward comment=“FTP access” disabled=no dst-port=
21,65400-65420 protocol=tcp

/ip firewall nat
add action=dst-nat chain=dstnat comment=“” disabled=no dst-port=21 protocol=
tcp to-addresses=192.168.179.8

/ip firewall service-port
set ftp disabled=no ports=21

Unfortunately this configuration also blocks any outgoing ftp sessions. My guess is that all traffic on port 21 is redirected to my server including the returning traffic form my local sessions to internet.

What is the correct way to solve this ?

2

Yes, you need to add accept rule for traffic coming from the server, so that it is not dstnated back.

3

sounds logical. How can i recognize this traffic ?

( remember it is the beginners section :slight_smile: )

4

You need to set the dst-address on the dstnat rule, or it will dstnat everything

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=21 protocol=tcp to-addresses=192.168.179.8 dst-address=x.x.x.x

Change the x.x.x.x to your public ip.

5

This does the trick. Thanks.