Ok, I have set up a rule similar to yours.
Interface | Proto | Source | Port | Dest | Port
WAN TCP * * athlon650 21 (FTP)
WAN TCP * * athlon650 20000-20020 (FTP)
I configured my FTP server (guildFTP) to use 20000-20020 for pasive
I'm still unable to reach it. I get the message
"waiting for server to respond"
If I take m0n0 out of the loop I am able to connect, so I am fairly certain
something I have set incorrectly.
When you said "You'll also need the equivalent port forwarding rules."
Is this something in addition to the firewall rules?
Sorry I'm still new to m0n0.
>> It looks like that requires a dedicated external IP, and that
>> the FTP is passive.
>> I'm trying to set up active and I don't have a dedicated IP
>> I'm using ZoneEdit as a dynamic DNS.
>> Also, my FTP server isn't assigned a static IP address.
>> Is there an easy way to route ports 20 and 21 to the ftp
>> server based on MAC address, or the hostname?
> I've deleted half of the messages for this thread, so apologies if some of
> this has been covered earlier.
> I'm running an FTP here using a semi-dynamic IP (changes every few weeks)
> and the DynDNS service (similar to ZoneEdit). You do not need a dedicated
> for your FTP server. You do not need to forward port 20 at all.
> Here's my firewall setup:
> Proto | Source | Port | Dest | Port
> TCP * * Cronus 21 (FTP)
> TCP * * Cronus 23580 - 23590
> Cronus is an alias pointing to the internal IP of the FTP box. You'll also
> need the equivalent port forwarding rules.
> There is absolutely no need to forward port 20 - it's used for outgoing
> in active mode only. It's outgoing, not incoming, so the default firewall
> allow rule should catch it.
> What you do need in passive mode, though, is a range of ports to allow the
> server to connect "back" to the client. Choose a few ports (you'll not
> many - allow the maximum number of concurrent connections you expect to
> at random and port forward those. Obviously you'll need to tell your FTP
> server to use this range as its PASV port range (most FTPs will default to
> using any port from 1024-65535 unless you tie them down to specific
> That's it.
> C.M. Bagnall, Partner, Minotaur
> Tel: (07010) 710715 Mobile: (07811) 332969 ICQ: 13350579
> AIM: MinotaurUK MSN: minotauruk at hotmail dot com Y!: Minotaur_Chris
> This email is made from 100% recycled electrons
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch