Hello,
I'm trying to enable passive FTP access to a server on my LAN from the internet. I have forwarded the passive port range on to the device, and can confirm success using an on-line port scanner and entries in the syslog that everything is as expected:
Code:
13-04-2011 17:55:46: DrayTek: Open port: 208.64.252.230:55685 -> XXX.XXX.XXX.XXX:55536 (TCP)
13-04-2011 17:55:46: DrayTek: [FILTER][Pass][wan->lan, 390:10:43.070][@S:R=13:1, 208.64.252.230:55685->XXX.XXX.XXX.XXX:55536][TCP][HLen=20, TLen=60, Flag=S, Seq=2467707053, Ack=0, Win=5840]
However, I am having trouble when connecting from an FTP client. Filezilla logs shows:
Code:
...
Command: PASV
Response: 227 Entering Passive Mode (XXX,XXX,XXX,XXX,229,121).
Command: LIST
Error: Connection timed out
Error: Failed to retrieve directory listing
I would like to see in the syslog evidence of
something trying to connect to the router, but the syslog only appears to log accepted packets and blocked DOS attempts. Using the online port scanner to connect to a port
not open/explicitely filtered does not show in the logs.
Can someone tell me if/how this is possible please?
Thanks in advance.