Pure-ftpd, passive mode, tls

Linux and Unix-Like Debian
1

Hello everyone,
Could you please help me with settings of pure-ftpd.

Here is my actual solution:
I have got linux (debian 7.1 wheezy ), where I run pure-ftpd, created virtual users, folder for ftp. I also install openssl, create private certificate for tls. All seems good.

 When user connect from internal address in passive mode without TLS - its working fine.
 When user connect from internal address in passive mode with TLS - its working fine.
 When user connect from external address in passive mode without TLS - its working fine.
 When user connect from external address in passive mode with TLS - ftp doesn't work, because ftp server return to external client local ip address. And client doens't know this address.

I also tried solve this problem to create conf file in /etc/pure-ftpd/conf/ForcePassiveIP ,where is written external address. But when user connect from external address he got external address what is fine, but after he got another error with connection. And this waz I think is not good, because users from internal network will not be able to connect ftp, because they will get external address from ForcePassiveIP conf file.
Maybe I can make two ftps server with different settings, but I think its not optimal. Could you please help me ? lw: I am beginner with linux, so if you have any solution could you please more expand for me ? Thank you very much.

2

Hi

Dont use this /etc/pure-ftpd/conf/ForcePassiveIP.

Do the setup so local users can connect. The problem is with your firewall blocking the connection from the out side.

Check your firewall NAT settings, you need to point the external address the user is using to the internal address of the ftp server and tell it to open port 21 for the ftp server.

3

Hi, maybe stupid question, but setup nat on server where ftp are or setup router on ISP side ? Thx you

---------- Post updated at 03:29 PM ---------- Previous update was at 03:27 PM ----------

Because I have got already 21 port open. But problem is only when I want go from outside in passive mode with tls.

4

Hi

is the ftp server on the same server as the firewall ?.
is your router the firewall to your network ?

if your router is the firewall then you have to setup the NAT on there.