NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

royjohn8's avatar
royjohn8
Aspirant
May 04, 2013

Problems with FTP access

Hi there,

Hoping there is a guru out there who can help me out.
I am trying to set up remote access to my Readynas and connect via FTP using Filezilla.
I thought my settings were correct but I am having no luck in connecting from the internet. Note - no problems accessing shares via LAN.

Here are the details...

HARDWARE:
Model: Netgear ReadyNas NV 2+
Firmware version: 5.3.7
Router: Netgear DG834N
Firmware version: 1.01.06 (rolled back from 1.02.15 as part of troubleshoot process - did not fix problem).

READYNAS SETTINGS:
Services -
FTP: ENABLED
Port: 21
Authentication Mode: user
Allow Upload Resumes: enabled
Home Shares over FTP: enabled
Passive Ports: 5000-5050
Use Masquerade Address: enabled
Masquerade as: <my external dynamic IP address (whatismyIP.com)>

FTP share access settings -

Read/Write access checked for 'everyone'
Protocol specific settings: automatic permissions is unchecked

ROUTER SETTINGS:
Firewall services -
FTP_port_range is set up, TCP, ports 5000 - 5050
Firewall Rules - inbound services
1) FTP (TCP) port 20,21 forwarded to <IP of ReadyNas>
2)FTP_port_range (TCP) forwarded to <IP of ReadyNas> [5000-5050]

FILEZILLA SETTINGS:
Host: <my external dynamic IP address (whatismyIP.com)>
Port: 21
Protocol: FTP
Encryption: "Require explicit FTP over TLS"
Log-on type: Normal
User: <user set up on readynas>
PW: <password of readynas user>
Transfer settings: passive

Does anything look out of place or are there any obvious issues with these settings? Any suggestions?

Cheers,
RJ

8 Replies

Replies have been turned off for this discussion
  • StephenB's avatar
    StephenB
    Guru - Experienced User
    royjohn8 wrote:
    READYNAS SETTINGS:
    Services -
    FTP: ENABLED
    Port: 21
    Authentication Mode: user
    Allow Upload Resumes: enabled
    Home Shares over FTP: enabled
    Passive Ports: 5000-5050
    Use Masquerade Address: enabled
    Masquerade as: <my external dynamic IP address (whatismyIP.com)>
    With FileZilla it is better to disable masquerading. Instead set "use the server's external IP address instead" under settings->connection->FTP->Passive Mode (in the FileZilla client).

    royjohn8 wrote:
    ROUTER SETTINGS:
    Firewall services -
    FTP_port_range is set up, TCP, ports 5000 - 5050
    Firewall Rules - inbound services
    1) FTP (TCP) port 20,21 forwarded to <IP of ReadyNas>
    2)FTP_port_range (TCP) forwarded to <IP of ReadyNas> [5000-5050]
    No need to forward port 20.

    With the masquerading setting change, you should be able to connect with filezilla from your local LAN to the internal IP address of the NAS. So try that, and tell us if it works (or copy/paste the FileZilla command window so we can see how it failed).
  • Thanks for the response.
    I have disabled masquerading on the NAS and set "use the server's external IP address instead" on Filezilla.
    With filezilla I can connect to NAS on local LAN no problems (to internal, local IP)
    However, still no success with connecting with filezilla remotely using above mentioned settings.
    (FZ:"connection timed out", "could not connect to server")
  • You could briefly try to set a DMZ to your NAS so that all traffic goes to it?
  • StephenB's avatar
    StephenB
    Guru - Experienced User
    royjohn8 wrote:
    Thanks for the response.
    I have disabled masquerading on the NAS and set "use the server's external IP address instead" on Filezilla.
    With filezilla I can connect to NAS on local LAN no problems (to internal, local IP)
    However, still no success with connecting with filezilla remotely using above mentioned settings.
    (FZ:"connection timed out", "could not connect to server")
    Ok.

    The next step is to use http://www.canyouseeme.org/ on a PC connected to your local LAN, and use it to confirm that port 21 is open. My guess is that your ISP blocks it.

    You can try configuring the NAS to use port 5000 for FTP (adjusting the passive port range to 5001-5050). Also change FileZilla to use port 5000.
  • Here are my settings and they work just fine. Took me a while to figure it out, so I hope this helps you!

    First, I set up a user for the FTP:



    Next, I made sure that I activated the FTP SFP and set it up, while making sure that I used "User" authentication:



    Then I created a share that is ONLY accessible via FTP:



    The share settings:



    Now my router and made sure that everything is port forwarded correctly:



    Finally, my Filezilla settings:



    At first I thought that the FTP protocol built into Frontview was no good. Then I thought about it and gave it another go. After scouring every website I can think of and grabbing the pieces I needed from different places, I finally got it to work. Needed help from friends to verify but all was good. Went as far as doing MD5's of small files after they downloaded, deleted from FTP, change file name, upload. Compare and we were golden!

    Good luck
  • The next step is to use http://www.canyouseeme.org/ on a PC connected to your local LAN, and use it to confirm that port 21 is open. My guess is that your ISP blocks it.


    It seems as though the port is blocked, I'll raise a support ticket with my ISP and see what I find.
    Thanks all for the help.
  • StephenB's avatar
    StephenB
    Guru - Experienced User
    royjohn8 wrote:
    It seems as though the port is blocked, I'll raise a support ticket with my ISP and see what I find.
    Thanks all for the help.
    You can work around it by using port 5000 for ftp (not 21) in both the ReadyNAS and FileZilla. You will also need to set the passive port range to 5001-5050. You can leave the router forwarding alone.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More