Non standard FTP port

[bbc1234]

I have installed 2 Synology DS106 in my network and enabled the FTP function. The used ports are 21 (for FTP1) & 21021 (for FTP2). The configuration of DS106(s) and port forward funtion on my router done.

For FTP1 (DS106), someone log in from outside by input ftp://domain via IE, that's OK and can sucessfully log in and view all folders.

For FTP2 (DS106), someone log in from outside by input ftp://domain:21021, the screen prompt to login ID and password. After input of login ID & password, no folders can be displayed and with error message "time out"

They have tried IE, cuteFTP and other FTP client software but still fail to log in. (the error message are "time-out", "10060")

Can 2 DS106(s) install in one network with both FTP functions. Any additional seetings are required except port forwarding ??

Pls help.

[jason]

pls cancel PASV mode:

IE：
tools－－＞網際網絡選項internet option－－－＞進階advance-------->取消使用被動(PASV)模式

CuteFTP：
Edit -> Setting -> Connection -> Firewall -> 取消“PASV Modeâ€

[bbc1234]

Dear Jason,

I have done as advised but still get the same error. Pls help. (both port and passive mode).

Is any additional seeting on router side (i.e. forward port of 21021) ??

Thanks a lot.

[maga77]

I ve got same problem

There is no solution??

[Franklin]

Please post your model numbers and firmware version numbers. This thread has been sent back to our engineering department to be looked at.

[maga77]

model DS-101j
firmware: 2.0.1 - 3.0385

When I try to access from the Internet (via IExplorer or SmartFTP or Windows Command Line) I get error

"425 Can't build data connection: Connection timed out"

Thanks in advance.

[Conclave]

Have you checked if the data port _IS_ open?
I'm having the smae problem with the data connection on my product and I've found out it's because my ISP has closed port 20. (ie. not possible to forward the port)

[NetBoot]

When an ftp client connects to your ftp server on port 21 or whatever port you want to use, and request a passive port for your data connection. The ftp server submits the request with the passive port. So, you need to open a range of ports on your router.

If you can't set the passive ports on the ftp server. Start with port 1024 and a range of 10. So, on your router it will be a custom port with a name you create and protocol and range. ie:

Passive
TCP
1024-1034

Usually port 1024 is reserved, so you might wanna start on port 1025.

If your running two ftp servers. Run it on two different command ports, ie: ftp1 21 ftp2 2121

Setup two custom passive port ranges (non overlapping) on your router.

Forward your appropriate ports to the correct ftp servers ip addresses.(internal)

For those that can't set passive ports. You wont be able to run two ftp servers.

Net....

[maga77]

Recently, I found this:

The guilty seems to be the router that does not support ALG (Application Layer Gateway).

My router's ALG works for FTP only with standard port 21, and, therefore using NON standard port, the communication does not happen correctly.

[info:http://en.wikipedia.org/wiki/Application_Layer_Gateway ]
Here his a similar case:
http://forums.practicallynetworked.com/archive/index.php/t-460.html

So, my question is:
Can you confirm is really this the problem?
How can I Solve it? I would not want to change the router

[maga77]

YES, I confirm by myself...

I found a lot of posts in Internet about people who have same problem with ALG feature (pratically, every SOHO router has got this problem!!!).
Google Link
So, it'not possible to access to a "second" FTP server behind a "normal" router if *YOU* are behind a router too (everything ok with modem ADSL).

Less than we have a professional Router/Fiewall supporting NAT/PAT (not only NAT..) OR the appliance, our Synology NAS, will become "NAT friendly", that is with a configuration options for WAN IP and Passive port range.
(ex. the FTP Software GUILDFTPd has these feature.. I read about here: http://www.dslreports.com/forum/remark,12329921 )

I immediately ask for a future implementation in the correct threed "Feature Request"

Bye

[Franklin]

Not sure if this helps out or not...but I wanted to share some recent experience that I've acquired-

I was experimenting with what was stated here, because I believe that it is in theory, you could have as many physical ftp servers behind 1 WAN address, assuming that the ports are set up correctly.

So I had one server that was in active mode, it was using port 21 as the LAN and WAN Port.


The second server, using port 768 as the WAN port, but 21 was the LAN port. On top of this, it was set to passive mode, and I forward ports 55536-55540 (WAN/LAN)

Once this was set, I can have two FTP servers behind my WAN address.

Hope this helps...

[maga77]

Can you explain better, please?

you said:
The second server, using port 768 as the WAN port, but 21 was the LAN port. On top of this, it was set to passive mode, and I forward ports 55536-55540 (WAN/LAN)

Did you use DS101j?
Where you specify the passive mode and the 768 port?
Why you forward port 55536-55540?

Sorry, but I can't see logic histoiry in this!?!

[Franklin]

I used two servers, two DS-106e with beta 417 firmware.

I forward 55536-55540 from the outside world to the server, in order for the passive FTP mode to work. Also, port 768 is a random port I picked from the WAN to reach the LAN port server's 21.

Hope this clarifies what I'm saying...

[NetBoot]

The real question is, 'Does the FTP server on the syno(non-beta) support passive mode or is it strictly active mode only?'

I don't recall seeing any setting for passive ports on the non-beta firmware.

There's a beta firmware for the DS-101j, which I guess allows you to set the passive ports.

Net....

[bbc1234]

Dear Franklin,

As I'm new, can you correct my settings if I'm wrong ??

I have two FTPs (CS406) & (DS 106), as per your theory,

1) set FTP port of CS 406 as 21
2) set FTP port of DS 106 as 768
3) perform port forwarding of 21 to CS 406 in my router
4) perform port forwarding of 768 to DS106 in my router
5) perform port forwarding of 55536-55540 to DS 106 in my router

Is that all, pls advise.

Many thanks, Paul