Hardware

Ask something
Discussion Locked

Router Question

0 helpful
7 replies

by woody h 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Linksys BEFSR41 Router. Can someone please explain to me what Port Triggering is? Or maybe you can answer a different question instead. I run FTP, I put my FTP server on a different port other than port 21 due to hacking that has occurred. Since I installed the router, if someone connects to me that is also behind a router, they can not bring up a directory listing, error 10060. If I put my ftp back on port 21 and forward both ports 20 and 21 to my ftp server, it works perfectly.But now I am open to hacking again. Does anyone have any idea how I can move it off of port 21? Thank you.

Woody

7 replies

by woody h

I have setup port forwarding for the new port that the ftp server is listening on. If you are behind a router yourself, that does not work. Thanks.

by kflier66

Woody, I'm not sure there's an easy fix for this. By convention, FTP clients expect to find the FTP server on Port 21. If your FTP clients are all within your organization, you may be able to restrict the range of addresses allowed through the router.
If you need to allow anyone to get to the FTP server, I don't think you can arbitrarily change the port number. You might try creating a DMZ, putting the FTP server in it, and installing as much security as possible. I have the same router,but have not tried the DMZ approach.

by woody h

I would prefer not to go into DMZ mode, however, I have considered it. The clients connecting to my server are from outside my organization. Thanks

by ciscoboy1

What FTP server software are you running?

one of two things will have to happen. You will have to change your PASV/Passive setting on your server or on the client to opposite what they are now. I am not 100% which needs to change, but I think it is the client.

by woody h

Tried this, it did not work. I did find the solutions to the problem. You must port foward the port that you want to use and the one above it through the firewall. Then you must tell the ftp client software to use a specific port and bind to the public ip address. A long way around it, and if anyone is interested, they are free to email me for specific instructions, but to me, it was worth it. Thank you for all your help.

This discussion is closed to new replies.