Joseph...when you attempted connection externally, have you verified from
the logs that it is getting to the m0n0wall? Port 21 is one that many
broadband ISPs have blocked, just as port 80 is. But then all you have to do
is change port numbers!
From: Joseph Lo [mailto:josephlo71 at yahoo dot com]
Sent: Saturday, September 09, 2006 4:34 AM
To: m0n0wall at lists dot m0n0 dot ch
Subject: FTP server behind monowall
I know this is an age old question: how to setup ftp server behind monowall.
I have searched the forum and read the monowall scratchpad. But I still
can't get my ftp server to work. I am hoping someone could enlighten me.
Here is my setup.
internet ----> monowall ----> switch ----> ftp server
monowall is 192.168.1.1
ftp server is 192.168.1.2. I am using FileZilla on windows XP as some have
Here are my monowall config
Firewall NAT Inbound
lf proto Ext. port range NAT IP Int. port range
WAN TCP 20 192.168.1.2
20 ftp server port 20
WAN TCP 21 192.168.1.2 21
ftp server port 21
WAN TCP 55000-61000 192.168.1.2 55000-61000 ftp
Firewall NAT outbound
Interface source Destination Target
WAN 192.168.1.0/24 * 192.168.1.2
Proto Source Port Destination Port
TCP * * 192.168.1.2 21
FTP server 1
TCP * * 192.168.1.2
55000-61000 FTP server 2
I have setup filezilla with passive mode settings External server IP address
for passive mode transfer -> use the following IP -> 192.168.1.2
I have also checked the tick box
* Don't use external IP for local connections
* use custom port range: 55000 - 61000
When I use ftp client to connect to 192.168.1.2 it work. When I use ftp
client from external lan to connect to my dynamic IP, it can't find the ftp
server. by the way, I am using monowall's dyndns server. Pinging my hostname
(eg. hostname.homeunix.net) from the net work.
I have use Shield-up to check and it report that port 21 is open.
I have tried many configuration and still can't get anything to work.
Get your own web address for just $1.99/1st yr. We'll help. Yahoo! Small
How low will we go? Check out Yahoo! Messenger's low PC-to-Phone call