I have an FTP server behind my firewall. I want to use a differnt port for security reasons. If i understand FTP correctly, the client when in active mode tells the ftp server what port it is listening to for data transfer. Many ftp programs have port 21 for setup and 20 for data transfer. If i want to use port 40 for setup and 41 for data trasfer, what ports do i need to open on my firewall? also how would i specify the ports on an ftp client? do ftp clients let you decide which ports to use for setup and data transfer? any recommendations?
When a user FTP's from a command prompt on his PC, his PC is using active FTP. That means that the client connects at port 21 and tells the ftp server that it is expecting a connection at port 20 for data transfer.
If i connect to an FTP server behind a firewall at a port other than 21, would the client still tell the server to connect at port 20 even thought it is connecting to the server at a port other than 21.
How would the firewall behave? if the FTP server is behind the firewall. and the client is connecting over the internet.
Active FTP means that the server will initiate a connection back to the client for data transfers on the port requested by the client. The connection will be SOURCED from port 20 destined to the client's requested port.
Changing FTP ports can be very problematic. Although your Pix firewall can dynamically figure it out using Fixup, the client may not have such a functional firewall. Some clients have have issues connecting to the data port, especially in Active mode where the remote client's firewall has to let the traffic back in. How will the remote firewall know that this new connection is part of an FTP session if it started on a port other than 21? Passive mode works best in these situations.
Many thanks for your response, could you please elaborate on the passive mode please. I am sitting on PC connected to the internet and want to FTP to a server that is behind a Firewall . The ftp server is configured to use port 40 and port 21 for ftp setup.
what should i do on the pix so that i can inticiate FTP connections to the ftp server at port 40.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...