FTP server behind a router

I'm trying to get an FTP server running behind a router. The ports are
forwarded & I can connect just fine from the world, but when it tries to
goto passive mode, the FTP server is returning it's 192.xxx address for
the data connection. How can you set it to return the public address?
The man pages don't really go into this, but I'd be surprised if the
server actually had to be on the public address. This is on FreeBSD 6.2.

Thanks,
Marty

On Tue, 05 Jun 2007 15:46:18 -0700, Martin rearranged some electrons to
form:

> I'm trying to get an FTP server running behind a router. The ports are
> forwarded & I can connect just fine from the world, but when it tries to
> goto passive mode, the FTP server is returning it's 192.xxx address for
> the data connection. How can you set it to return the public address?
> The man pages don't really go into this, but I'd be surprised if the
> server actually had to be on the public address. This is on FreeBSD 6.2.
>
> Thanks,
> Marty

The router also needs to forward the ports that are used in passive mode,
not just port 20 & 21. You should be able to configure your FTP server to
use a particular block of random ports, and those ports have to pass
through your router.

http://slacksite.com/other/ftp.html

--
David M (dmacchiarolo)
http://home.triad.rr.com/redsled
T/S 53
sled351 Linux 2.4.18-14 has been up 22:20 1 user

David M wrote:
>
> The router also needs to forward the ports that are used in passive mode,
> not just port 20 & 21. You should be able to configure your FTP server to
> use a particular block of random ports, and those ports have to pass
> through your router.
>
> http://slacksite.com/other/ftp.html
>

The ports are forwarded. The computer is actually is the DMZ host on the
router. These were done separately, but there was no change in action.

Thanks,
Marty

On Tue, 05 Jun 2007 18:44:47 -0700, ME rearranged some electrons to form:

> David M wrote:
>>
>> The router also needs to forward the ports that are used in passive mode,
>> not just port 20 & 21. You should be able to configure your FTP server to
>> use a particular block of random ports, and those ports have to pass
>> through your router.
>>
>> http://slacksite.com/other/ftp.html
>>
>
> The ports are forwarded. The computer is actually is the DMZ host on the
> router. These were done separately, but there was no change in action.
>
> Thanks,
> Marty

Whatever you say, but I would still bet you have the router mis-configured.
What kind of router is it?

--
David M (dmacchiarolo)
http://home.triad.rr.com/redsled
T/S 53
sled351 Linux 2.4.18-14 has been up 1 day 34 min

David M wrote:
> On Tue, 05 Jun 2007 18:44:47 -0700, ME rearranged some electrons to form:
>
> Whatever you say, but I would still bet you have the router mis-configured.
> What kind of router is it?
>

It's a D-Link. Here's the text from the firewall config page:

Allow ftp WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15*40000-65000
allow ftp WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15*1023-2000
Allow ftp WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15*9100-9200
Allow DMZ Host WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15**

On Tue, 05 Jun 2007 21:03:53 -0700, ME rearranged some electrons to form:

> David M wrote:
>> On Tue, 05 Jun 2007 18:44:47 -0700, ME rearranged some electrons to form:
>>
>> Whatever you say, but I would still bet you have the router mis-configured.
>> What kind of router is it?
>>
>
> It's a D-Link. Here's the text from the firewall config page:
>
> Allow ftp WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15*40000-65000
> allow ftp WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15*1023-2000
> Allow ftp WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15*9100-9200
> Allow DMZ Host WAN,* LAN,192.168.0.15 LAN,, 192.168.0.15**

That's great, as long as your FTP server is configured to use those same
ports. Might I suggest using vsftpd?
http://vsftpd.beasts.org/

--
David M (dmacchiarolo)
http://home.triad.rr.com/redsled
T/S 53
sled351 Linux 2.4.18-14 has been up 1 day 7:35

David M wrote:
> That's great, as long as your FTP server is configured to use those same
> ports. Might I suggest using vsftpd?
> http://vsftpd.beasts.org/
>

Thanks. The man page for vsftpd indicates that it should handle my problem.