PSD Firewall -> FTP :(

RouterOS General
1

Hi,

The problem is that FTP client, Filezilla, is triggering port scan rule and the address gets blocked.

add chain=forward protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="Port scanners to list " disabled=no

The customer tried with passive and active mode, active mode blocks the server address.

We’ve tried to increase the psd WeightTreshold from 20 to even 240. But the FTP client still triggers the rule, so we’ve disabled the rule.

I’m going to blacklist

2

Use a non-standard port for FTP and then translate to port 21 in the NAT rule.
Or if you can define the IP addresses in the dstnat rule EVEN BETTER.