NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Is there an actual FTP server built in?
Strangely, I can access FTP://NAS IP internally. Port forwarding port 21 I'm not able to do so externally. I look high and on the interface and saw nothing about FTP server. I ran into another p...
schumaku wrote: ... The FTP ALG does listen on the FTP control port for passive data connections, and does adjust the port forwarding and firewall for the FTP data port(s) involved. ... Once you try to use FTPES (explicit security) - more and more FTP clients default to FTPES if it's announced available during the FTP connection handshake - once the FTP client has requested FTPES, the FTP ALG can't work anymore, because it has no insight into the now encrypted FTP control channel.
Fully agree that ALGs are part of the puzzle. I didn't get into that aspect in my simplified explanation.
On the explicit security aspect - you definitely want to use encryption, as otherwise anyone snooping the connection can see the username/passwords you use to access the server. And as schumaku says, ALGs won't assist with the data connections if you use explicit security/encryption.
Wow, I'm a little embarrassed. After 20+ years in the IT field I wasn't aware of this.
I've been using off the shelf Asus routers at home but recently replaced it with a pfsense router. I will look into this.
I've been using off the shelf Asus routers at home but recently replaced it with a pfsense router. I will look into this.
Consumer routers typically have FTP ALGs on board - that's why you never had to take care of the FTP passive data ports.
For pfsense, start here -> https://docs.netgate.com/pfsense/en/latest/nat/ftp-without-a-proxy.html - keep in mind that the warning in this tech note is not fully correct, FTPES is perfectly fine.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
