IP for Passive mode

Home Forums General Firewall Help IP for Passive mode

  • This topic is empty.
Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #27996
    Anonymous
    Participant

    Hi Guys, I am trying to set up a FTP server on my computer. My PC is behind a router (D-LINK DI 604).

    I have forwarded ports 20-21 to my IP. Also forwarding ports 20000-20200 for PASSIVE mode.

    But for Passive mode i have to provide a different IP in the SERVER MANAGER in the ADVANCED tab. Is this IP the internal (LAN) or external (WAN) IP of my router.

    I would appreciate if you could help me with this.

    Tks.

    #31119
    Anonymous
    Participant

    Hello Gavin,

    You will want to use your external (WAN) IP address.

    #31120
    Anonymous
    Participant

    I want to allow PASV connections but my WAN ip is dynamic. I have a dyndns service so I access my ftp from something like ftp://name.dyndns.org:port . How can i make this work with cerberus?

    #31121
    Anonymous
    Participant

    *push*

    i hope someone will answer. i have the dyndns problem too :?

    #31122
    Anonymous
    Participant

    Anonymous wrote:

    *push*

    i hope someone will answer. i have the dyndns problem too :?

    Hi,

    I use Wingate Proxy to access a cerberus ftp server on a dynamic referenced pc. (using dyndns.org).

    The method is simple:

    1. configure wingate to route alle non-proxy connections to

    a server at 127.0.0.1 port 22221 (any un-usual high number)

    Change policies to allow user guest to use ftp service

    (restricted to 127.0.0.1)

    A similar mapping should be made in the configuration of your router.

    2. manually add the interface 127.0.0.1 with port 22221 in cerberus

    server manager -> interface options

    3. block acceptance of all other interfaces in cerberus

    ip manager -> allow only adress 127.0.01

    4. use a dynamic ip account manager (like Direct Update)

    to refresh your dial-up ip in the dyndns database.

    Now your ftp server should work.

    Hope his helps

    jd

    #31123
    Anonymous
    Participant

    jd wrote:

    Anonymous wrote:

    *push*

    i hope someone will answer. i have the dyndns problem too :?

    Hi,

    I use Wingate Proxy to access a cerberus ftp server on a dynamic referenced pc. (using dyndns.org).

    The method is simple:

    1. configure wingate to route alle non-proxy connections to

    a server at 127.0.0.1 port 22221 (any un-usual high number)

    Change policies to allow user guest to use ftp service

    (restricted to 127.0.0.1)

    A similar mapping should be made in the configuration of your router.

    2. manually add the interface 127.0.0.1 with port 22221 in cerberus

    server manager -> interface options

    3. block acceptance of all other interfaces in cerberus

    ip manager -> allow only adress 127.0.01

    4. use a dynamic ip account manager (like Direct Update)

    to refresh your dial-up ip in the dyndns database.

    Now your ftp server should work.

    Hope his helps

    jd

    excuse me for being a little rude, but u call this easy?? this seems very hard and a need to use wingate proxy which I don’t use…. is there any easier way to forward PASV commands to a dynamic public ip for PASV commands, or maybe can u explain this a little more clearly, u lost me on step 1 where u say a similar mapping should be made on your router, are u saying to forward port 22221 to the private address of machine where cerberus resides(127.0.0.1 should not be the ip address to forward on your router), and what do u mean by “Change policies to allow user guest to use ftp service (restricted to 127.0.0.1)”??? I have no idea what the heck you are talking about here,

    Please explain, as I would love to figure out how to handle a dynamic router ip for pasv commands, I almost thought I found an answer, … a great solution would be to put in the dydns name of the router(which maps to the correct public external ip) on the setup configuration but obviously your only option would be to put in an ip address. I guess its hard when u don’t have public static ip addresses to do everything when you are behind a router, and obviously many server shops have the luxury of static public ip’s……..

    please advise if there is anyone out there who knows a clean solution to this or knows how to explain jd’s post about wingate proxy……No flame intended by the way…..

    thanks

    #31124
    otsoroke
    Participant

    Give your ISP an extra $5 / month for a static IP

    #31125
    Anonymous
    Participant

    otsoroke wrote:

    Give your ISP an extra $5 / month for a static IP

    yeah right, most isp’s wont’ even offer u static ips in your area at all(they won’t in this case), and most business class dsl or even home dsl with static ips cost way more than an extra $5 a month….

    but u are right,…. that would sure solve this issue, but some network environments this is not appropriate to a dynamic, public ip….. they make it difficult to host servers that way but where there is a will, there is a way….

    #31126
    otsoroke
    Participant

    Sorry to hear, It’s funny how static IP’s are unavailable / more costly to some than others.. I suppose figuring out your DynDNS config is your option.

Viewing 9 posts - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.
Close Cart

Shopping Cart