Troubleshooting FTP Problems § Centipede Networks

08 Sep 2010

Support Center » Knowledgebase » Troubleshooting FTP Problems

	Troubleshooting FTP Problems

Solution FTP will only work on the primary WAN until someone finishes pftpx-routeto integration. It is also NOT currently working in load balancing situations when the FTP helper is turned on.

Outgoing FTP (LAN -> Internet)

1. Ensure that the FTP helper is not disabled on Interfaces, LAN
2. If you have a restrictive ruleset or are utilizing policy based routing for multiple-wans then ensure that you have permitted traffic to 127.0.0.1 / ports 8000-8020. IE: allow LAN subnet to 127.0.0.1 8000-8020. This rule should be on top of all other LAN rules that utilize policy based routing.
3. If you are running windows try turning off the windows firewall

Incoming FTP (Internet -> LAN/OPT lan type interface ie. no gateway entered for the OPT interface)

1. Ensure that the FTP helper is enabled on the WAN/OPT interface
2. Delete any existing FTP port forwards or firewall rules that where created perviously for FTP
3. Add a new port forward for destination port 21 with the destination private NAT ip (example: 192.168.1.20)
4. If you are running windows try turning off the windows firewall

Alternatively for incoming FTP you can disable the FTP Helper on Interfaces -> WAN and simply port forward 21 and the data port range used by FTP. Generally this is definable on the FTP server (modern day implementations). You can easily restrict the data port range to a specific range and simply forward that.

If the above doesn't help:
1. Use SCP/SFTP which only needs 1 port to traverse the firewall since its wrapped in SSH (yes a safe AND simple way of traversing a firewall!)
2. Don't use FTP
3. Turn off the FTP helper option in Interfaces -> LAN and Interfaces ->WAN or any optional interfaces in use.
4. Switch to an alternative firewalling system

Article Details

Article ID:

Created On:

21 Sep 2007 01:30 AM