FTP port forwarding on TransPort routers

When connecting to an FTP server on a LAN behind a TransPort router, you will need to set up port forwarding so you can access the server from the internet.

Consider this:


The PC needs to access the FTP server, the router is listening on port 2121 and the FTP server is accepting FTP connections on port 21.

The best way to configure the router is by using the firewall to forward traffic to the FTP server.  The fiewall will monitor the FTP control traffic and open FTP data ports dynamically as required.


The firewall rules to add for this scenario are:

# FTP forwarding to FTP server
pass in break end on ppp 1 proto ftp from any to addr-ppp 1 port=2121 -> to 172.16.0.2 port=21
# Allow all traffic on ETH 0, rule is required so router can handle NAT'd FTP packets on ETH0
pass break end on eth 0

(Do not forget to configure other rules for PPP 1 if required so you dont get locked out.)

Finally, enable the firewall on PPP 1 and Ethetnet 0.


For more information, please check the following Quick Note:

QN4