FTP not working since Core Update 156

[toomstone (Dave Toomey)]

Hi, been running IPfire 5 years now, firs time on the community. I have a FTP server for basically software downloads and any IT engineer tools etc. I am using FileZilla on a server 2012 box, since Core Update 156 I have not been able to browse the FTP DIRs ad sometime not get in to the FTP, internally it works so it has to be IPFIRE. Anyone else had this issues?

[bbitsch (Bernhard Bitsch)]

Hi Dave, first a welcome in the IPFire community.

Some time ago, with release of Core 156 I think, ALGs where removed from IPFire.
So all configurations relying on it don’t work anymore.
There are some topics about this.

[pmueller (Peter Müller)]

Hi,

welcome from my side, too.

Unfortunately, removing the ALGs in Core Update 155 was a breaking change, especially when it comes to FTP. NAT Slipstreaming, however, left us with no other option.

These are similar threads - depending on your exact FTP scenario, they may or may not be helpful:

FTP problems on Core 155 - ALG FTP remove responsible?

I had many problems with 155, so I had to downgrade to 154.

FTP partially does not work

Hello Peter, thank you very much for a super fast answer! I would have expected that too, but that was not the case… I received the message “Authentication failed”. Where exactly do I need to look in the logs? I’m a whole step further: I made another phone call to Strato. The main user also has SSH access. Therefore it is possible to use sftp for this user. Then port 22 is sufficient. All other users use ftp. There you need then port 21 to initiate the connection. Because of the passive…

Active FTP on IPFire

active ftp is not possible without an active aplication layer gateway which was removed to security reasons.

Sorry for the inconvenience. After all, we are doing security here, so technically, we sometimes break things that would have otherwise worked…

Thanks, and best regards,
Peter Müller

[toomstone (Dave Toomey)]

Hi Bernhard, thanks for the quick reply, I didn’t expect such a quick response, wow.

Ok I will have look at this, thanks again

[bbitsch (Bernhard Bitsch)]

Please look at Peter’s more specific answer, also.

[toomstone (Dave Toomey)]

Hi Peter, thanks for the reply, I will have a look at these and see if it can be fixed, I really miss my FTP server, especially when onsite, if it cannot be fixed I will to make our OWNCLOUD server the replacement server for the job as we use this FTP when on site etc.