FTP partially does not work

[pmueller (Peter Müller)]

Hi,

@xomacx

I have recently updated ipfire. Previously I had the version Core 137. Now the version Core 157 is installed.

well, that IPFire machine of yours was certainly lagging behind. Glad to see it is up to date by now.

Regarding FTP traffic, it might be worth mentioning we had to remove all ALGs from IPFire in Core Update 155, including that one for FTP, due to this security vulnerability:

Security Announcement: Mitigating NAT Slipstreaming - The IPFire Blog

@xomacx

Now to my problem: I can log in to Strato with the main user from the account on the FTP server. But if I try another user (same destination, different user, different password), unfortunately it doesn’t work.

This is strange to see. I would have expected FTP to either work always, or never, especially when talking to the same FTP server.

What do you mean exactly by “doesn’t work”? Do you observe any error messages? What’s in IPFire’s firewall logs at or around the time you try to establish the FTP connection?

I do not know any specifications of Strato’s FTP service. Are they doing passive FTP for some users (see also this thread)? Do they offer FTP encrypted in transit?

Thanks, and best regards,
Peter Müller