On Thu, Jun 18, 2009 at 16:25, Evgeny Yurchenko<[email protected]> wrote: >>From: Célio [mailto:[email protected]] >>Sent: June 18, 2009 4:32 AM >>To: [email protected] >>Subject: [pfSense Support] Disabling (outbound) FTP helper on a per rule >>>basis ? >> >>Hi, >> >>I have the usual "ftpes" or "passive ftp" issue, with the FTP Helper >>I'm only wondering about "outbound connections" (i want to connect to >>>various external FTP servers) >>Isn't there a way to specify that when connecting to IP "x.x.x.x" i don't >>>want to use FTP Helper ? >>Or maybe something to bypass it like reforwarding port xyz to port 21 for >ip >>"x.x.x.x" so that ftp helper is not triggered ? >>Or may i use another ftp proxy in my dmz that would support ftpes and >>>disabled ftp helper for dmz ? >> >>My problem is that i have to connect very often to different FTPs including >>>active/passive/ftpes ... and having to change the ftphelper option every >>>time is really boring ... >> >>Any hint ? >> >>(if it can help i'm having two wan connections ) >> >>Thx a lot ! >> >>Celio > -------------------------------------------- > 1) FTP helper works perfectly.
Ftp helper in pfSense doesn't work with outgoing ssl encrypted ftp, you have to disable the helper to get it working with ftpe/s. > 2) You can either use ftp-helper on the interface or disable it, you can > not use it only for 'some ftp sites' > 3) If you want to get rid of pfSense's ftp helper then disable it and > redirect all FTP traffic to your own FTP proxy. Or disable the helper and use passive mode ftp when possible and in the rare case where you have to active mode you can use an ftp client that supports limiting the active mode listening port range (filezilla for example) and do the port forwards yourself. > > Eugene > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > Commercial support available - https://portal.pfsense.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
