<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
If you use PASV mode - you don't have to open inbound ports in your firewall. In PASV mode, the server makes the connection outwards towards the PC that initiated the FTP connection. Its a great way of getting around the problems with a NAT/PAT firewall/router.
<br />
<br />So you don't have modify the port range in the server, And you don't have to open ports on the firewall, either a external firewall or the firewall software in the BlueOnyx server. As long as your external firewall forward in TCP port 21 to the BlueOnyx server - PASV FTP connections should work.
<br />
<br />Give it a try. Turn on FTP and try a PASV mode connect from outside your network.
<br />
<br />
<br />Chuck
<br />
<br /><font size="2"><b>---------- Original Message
-----------</b>
<br />
From: Philip Hamer <phil@pwmaintenance.co.uk>
<br />
To: "blueonyx@mail.blueonyx.it" <blueonyx@mail.blueonyx.it>
<br />
Sent: Mon, 12 Jan 2015 18:03:16 +0000
<br />
Subject: [BlueOnyx:16847] Secure FTP Ports
<br />
<br />> Hi.
<br />>
<br />>
Tracked down PASV mode in proftpd.conf.
<br />>
<br />>
There is a massive range of ports. If I narrow this down to say 10, then open my
external firewall to that port range, then port forward to my BO server this
could work.
<br />>
<br />>
I guess I'll have to open the firewall on the BO box as well.
<br />>
<br />>
Any suggestions if this is safe / recommended?
<br />>
FTP is hardly ever used, we are CMS based now on most sites, a few friends host
a website on the BO box so maybe three of them use FTP anyway. No need for
massive connections or throughout.
<br />>
<br />>
I should have migrated from the old Zywall kit over to PFsense within a couple
of weeks, although reading some posts on FTPS with PFsense this can be
problematic.
<br />>
<br />>
Thanks guys, any help is much appreciated.
<br />>
<br />>
Sent from my iPhone
<br />>
<br />>
> On 12 Jan 2015, at 17:00, blueonyx-request@mail.blueonyx.it wrote:
<br />>
>
<br />>
> Secure FTP Ports
<br />>
<br />>
_______________________________________________
<br />>
Blueonyx mailing list
<br />>
Blueonyx@mail.blueonyx.it
<br />>
<a target="_blank" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>