{"id":428,"date":"2011-02-02T23:52:11","date_gmt":"2011-02-02T15:52:11","guid":{"rendered":"http:\/\/amjet.dyndns.biz\/blog\/IT\/?p=428"},"modified":"2013-03-01T19:49:54","modified_gmt":"2013-03-01T11:49:54","slug":"vsftpd-behind-pfsense","status":"publish","type":"post","link":"https:\/\/blog.amjet.biz\/IT\/?p=428","title":{"rendered":"vsftpd behind pfsense"},"content":{"rendered":"

\u65e9\u671f ftp server \u53ea\u63d0\u4f9b active mode\uff0cclient \u7aef\u8207 ftp server \u5efa\u7acb\u9023\u7dda\u5f8c\u7531 server \u7684 port 20 \u9023\u5230 client \u6307\u5b9a\u7684 port \u9032\u884c\u8cc7\u6599\u50b3\u8f38\uff0c\u4f46\u662f\u5728\u76ee\u524d\u7684\u7db2\u8def\u74b0\u5883\u4e0b\uff0c\u901a\u5e38 client \u7aef\u524d\u65b9\u90fd\u6709 firewall \u6216\u5206\u4eab\u5668\uff0cserver port 20 \u9023\u56de client \u7aef\u6642\u901a\u5e38\u90fd\u6703\u88ab firewall \u6216\u5206\u4eab\u5668\u64cb\u6389\uff0c\u56e0\u6b64\u7cfb\u7d71\u7ba1\u7406\u4eba\u54e1\u5e38\u6703\u9047\u5230\u7528\u6236\u62b1\u6028\u7121\u6cd5\u4f7f\u7528 ftp server\u3002<\/p>\n

\u70ba\u4e86\u89e3\u6c7a active mode \u7684\u554f\u984c\uff0cftp \u5354\u5b9a\u7a0d\u5f8c\u589e\u52a0\u4e86 passive mode\uff0cclient \u7aef\u8207 ftp server \u5efa\u7acb\u9023\u7dda\u5f8c\u7531 server \u901a\u77e5 client \u7aef\u9023\u63a5\u5230 server \u6240\u958b\u555f\u7684\u53e6\u4e00\u500b high port \u9032\u884c\u8cc7\u6599\u50b3\u8f38\uff0c\u5728\u9019\u500b\u6a21\u5f0f\u4e0b\u5982\u679c \u00a0ftp server \u4f4d\u65bc firewall \u5f8c\u7aef\uff0c\u800c\u4e14\u662f\u4ee5 port forward \u65b9\u5f0f\u63d0\u4f9b\u670d\u52d9\uff0c\u8a2d\u5b9a\u4e0a\u6703\u6bd4\u8f03\u8907\u96dc\uff0c\u4ee5\u4e0b\u4ee5 vsftp \u5728 pfsense \u5f8c\u7aef\u63d0\u4f9b\u670d\u52d9\u70ba\u4f8b\uff0c\u8aaa\u660e\u6240\u9700\u7684\u8a2d\u5b9a\uff1a<\/p>\n

vsftpd<\/strong><\/p>\n

\u5728 vsftpd.conf \u52a0\u5165\u4ee5\u4e0b\u8a2d\u5b9a<\/p>\n

pasv_addr_resolve=YES<\/div>\n
pasv_address=<your server’s full qualified domain name><\/div>\n
pasv_min_port=60000<\/div>\n
pasv_max_port=60100<\/div>\n

pfSense<\/strong><\/p>\n

firewall rules<\/p>\n

1. allow any traffic to <wan ip>:21<\/p>\n

2. allow any traffic to <wan ip>:60000~60100<\/p>\n

NAT rules<\/p>\n

1. WAN port 21 forward to <internal server ip>:21<\/p>\n

2. WAN port\u00a060000~60100\u00a0forward to <internal server ip>:60000~60100<\/p>\n

 <\/p>\n

[ratings]<\/p>\n","protected":false},"excerpt":{"rendered":"

\u65e9\u671f ftp server \u53ea\u63d0\u4f9b active mode\uff0cclient \u7aef\u8207 ftp server \u5efa\u7acb\u9023\u7dda\u5f8c\u7531 server \u7684 port 20 \u9023\u5230 client \u6307\u5b9a\u7684 port \u9032\u884c\u8cc7\u6599\u50b3\u8f38\uff0c\u4f46\u662f\u5728\u76ee\u524d\u7684\u7db2\u8def\u74b0\u5883\u4e0b\uff0c\u901a\u5e38 client \u7aef\u524d\u65b9\u90fd\u6709 firewall \u6216\u5206\u4eab\u5668\uff0cserver port 20 \u9023\u56de client \u7aef\u6642\u901a\u5e38\u90fd\u6703\u88ab firewall \u6216\u5206\u4eab\u5668\u64cb\u6389\uff0c\u56e0\u6b64\u7cfb\u7d71\u7ba1\u7406\u4eba\u54e1\u5e38\u6703\u9047\u5230\u7528\u6236\u62b1\u6028\u7121\u6cd5\u4f7f\u7528 ftp server\u3002 \u70ba\u4e86\u89e3\u6c7a active mode \u7684\u554f\u984c\uff0cftp \u5354\u5b9a\u7a0d\u5f8c\u589e\u52a0\u4e86 passive mode\uff0cclient \u7aef\u8207 ftp server \u5efa\u7acb\u9023\u7dda\u5f8c\u7531 server \u901a\u77e5 client \u7aef\u9023\u63a5\u5230 server \u6240\u958b\u555f\u7684\u53e6\u4e00\u500b high port \u9032\u884c\u8cc7\u6599\u50b3\u8f38\uff0c\u5728\u9019\u500b\u6a21\u5f0f\u4e0b\u5982\u679c \u00a0ftp server \u4f4d\u65bc […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[104,40,105],"class_list":["post-428","post","type-post","status-publish","format-standard","hentry","category-other","tag-ftp","tag-pfsense","tag-vsftpd"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=\/wp\/v2\/posts\/428","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=428"}],"version-history":[{"count":5,"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=\/wp\/v2\/posts\/428\/revisions"}],"predecessor-version":[{"id":672,"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=\/wp\/v2\/posts\/428\/revisions\/672"}],"wp:attachment":[{"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=428"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=428"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.amjet.biz\/IT\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=428"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}