SRX5308 FTP inbound rule

[franklinian]

We have been unable to get a basic FTP inbound rule working on this firewall while other services are working fine (e.g. port 80).

Our local FTP server responds 'open' to port 21 check.  The SRX5308 firewall rule is set to allow FTP, allow always, single address (FTP server address), standard port number, WAN destingation IP WAN1, WAN users ANY.

Our SRX5308 is using firmware 4.3.3-6, is set to NAT routing and uses two WAN connections on auto-rollover (WAN1 is primary).

Thanks in advance to users who can suggest what else to check.

[franklinian · Accepted solution]

This has been resolved.  We moved the FTP entry on the Inbound Services table to the top of the list.  Other entries must have been interfering.  Thanks to all.

[JohnRo]

Hello franklinian, 

Welcome to the community! 

Can you post a screenshot of your Inbound Services table? I don't see anything wrong on how you configured the firewall rule. 

I look forward to your response. 

Thanks, 

[train_wreck]

Also, make sure you are using "passive" mode to connect to the FTP server, not "active" mode. Active requires special firewalling and/or an application-layer gateway to operate behind firewalls.

[franklinian · Accepted solution]

This has been resolved.  We moved the FTP entry on the Inbound Services table to the top of the list.  Other entries must have been interfering.  Thanks to all.