On Tue, Feb 10, 2009 at 12:51 PM, Nick Smith <[email protected]> wrote:
> I would like some clarifications on the FTP troubleshooting page.
>
> It states:
> 2. If you have a restrictive ruleset or are utilizing policy based
> routing for multiple-wans then ensure that you have permitted traffic
> to 127.0.0.1 / ports 8000-8030. IE: allow LAN subnet to 127.0.0.1
> 8000-8030. This rule should be on top of all other LAN rules that
> utilize policy based routing.
>
> What does this mean exactly?
> Make a rule, select LAN Subnet as the source to destination 127.0.0.1
> for ports 8000-8030?
>
> Would this be created under the LAN tab?

Yes, the rule should be created on the LAN tab.

> What if my client also used ports 7950-8079 as well?
> Would i edit the rule to allow all the ports instead?

Doesn't matter - this rule is only to make sure that you LAN hosts can
access the FTP helper.

> do i need to make rules from the lan subnet for each IP address i need
> to ftp to?

No, you only need rules for the LAN subnets you want to be able to FTP
from, not to.

> Also, do i need to do port forwarding for those ports as well?

No.

-Dave

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to