FTP default port 21 has problem, but port 2121 doesn't !!

Hello friends,

Lately I want to share files to friends of mine on the net. I put these files on my mikrotik server. And I let them grab those files using ftp access to the mikrotik server.

Case 1: Using default port 21 = Fail
example = ftp://my.public.ip:21/filename.ext

Case 2: Using port 2121, then I redirect to port 21 in “IP Firewall Nat - dstnat chain” = Success
example = ftp://my.public.ip:2121/filename.ext

Why this happens?


PS. What I have tried:

  1. Both using port 21 and 2121 were using all same configuration, so I think the wrong thing was about port 21 somehow just failed.

  2. I even allowed connection to port 21 explicitly on particular Ethernet that is connected to the internet in “IP Firewall Rule” on the most top of the list, so port 21 should work fine, but it still didn’t work on me. I did that because I don’t know if I messed up with port 21 in long list of “IP Firewall Rule” at below. On the contrary, I don’t need to create “IP firewall rule” to allow port 2121 incoming explicitly, but it worked just fine.

  3. When using port 21, I can see by creating logs, incoming request was accepted and outgoing reply was sent, on “IP Firewall Connection”. But why couldn’t my friend get the reply connection? While it looked Mikrotik already sent the reply connection?

  4. This problem is happening on my ROS 2.9.27. At the same time, right now I still also use version ROS 2.9.1 on other server, and this older version is still working for me to give access using port 21. Is this a bug on version 2.9.27?

So experts, Why this happens?

Thank you in advance.