Community discussions

MikroTik App
 
wifix
just joined
Topic Author
Posts: 12
Joined: Sat May 26, 2007 8:25 pm

Problem with ftp client in passive mode [pasv]

Mon Jan 31, 2011 11:49 pm

Hi,

we have installed some rb750g with ros 4.16 to our customers.
rb750g make the router function with nat (with masquerade) on ether1 (public interface) and lan on the ether2 (with private address 192.168.0.x).

Actually the customer have some host under private network like 192.168.0.2 - 192.168.0.3 and so on.

When one of the client using filezilla ftp client try to enstabilish a connection with remote public server host in passive mode, this estabilish a connections, but don't pass any data and the ftp connection estabilished gone up and down systematically.

This is strange.

We have tryed enabling /ip firewall service ports 20,21 - but this don't change the result.

While if we get a active ftp client connection all appear to be ok also with large files.

Consider that we have already tested this issue with many version of ROS like 3.30, 4.16 and also 5.0rc7.

Anyone has got this problem ?

Thanks in advance.
 
Myron
Member Candidate
Member Candidate
Posts: 253
Joined: Sat Sep 05, 2009 3:17 am
Location: Boracay, Philippines

Re: Problem with ftp client in passive mode [pasv]

Tue Feb 01, 2011 9:46 am

try this post by fewi

add action=accept chain=forward comment=FTP disabled=no dst-port=20,21 protocol=tcp
add action=accept chain=forward comment="" connection-state=established disabled=yes
add action=accept chain=forward comment="" connection-state=related disabled=yes

hope this help
 
ditonet
Forum Veteran
Forum Veteran
Posts: 835
Joined: Mon Oct 19, 2009 12:52 am
Location: Europe/Poland/Konstancin-Jeziorna
Contact:

Re: Problem with ftp client in passive mode [pasv]

Tue Feb 01, 2011 10:18 am

@Myron
Disabled rules are useless :D
IMHO it should be:
add action=accept chain=forward comment=FTP disabled=no dst-port=20,21 protocol=tcp
add action=accept chain=input comment="" connection-state=established disabled=no
add action=accept chain=forward comment="" connection-state=established disabled=no
add action=accept chain=forward comment="" connection-state=related disabled=no
@wifix
With that config I never noticed any problem with passive FTP.

Regards,
 
wifix
just joined
Topic Author
Posts: 12
Joined: Sat May 26, 2007 8:25 pm

Re: Problem with ftp client in passive mode [pasv]

Tue Feb 01, 2011 1:43 pm

Hi,
applying the rules, the problem is not solved....

The FTP Passive still going up and down during the transfert ....

Any other ideas ?

Thanks in advance !!!

Who is online

Users browsing this forum: djvabe, Mr47 and 111 guests