[pure-ftpd] VPN issues
sse450 <[email protected]> Wed, 28 Oct 2020 09:14:44 +0300
| Newsgroups | gmane.network.pureftpd.user |
|---|---|
| Message-ID | <[email protected]> |
Hello, I have been using pure-ftpd for years without any problem. Thank you for all your efforts. Lately, I wanted to install it on my home server which is behind a pfSense router. All the devices and the server on LAN reach out to the Internet through VPN client installed on pfSense. This creates problem with pure-ftpd which I have no idea how to solve. Here is the client communication with pure-ftpd: Warning: Allowing fallback to plaintext FTP is insecure. You should use explicit FTP over TLS. Warning: Selected port (2100) is not the default port (21) of the selected protocol. Status: Resolving address of ftp.burasidir.com Status: Connecting to aaa.bbb.ccc.ddd Warning: The entered address does not resolve to an IPv6 address. Status: Connected, waiting for welcome message... Reply: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- Reply: 220-You are user number 1 of 5 allowed. Reply: 220-Local time is now 08:26. Server port: 2100. Reply: 220-This is a private system - No anonymous login Reply: 220 You will be disconnected after 15 minutes of inactivity. Command: CLNT https://ftptest.net on behalf of 45.87.212.180 Reply: 530 You aren't logged in Command: AUTH TLS Reply: 500 This security scheme is not implemented Warning: Server refused AUTH TLS, trying deprecated AUTH SSL fallback. Command: AUTH SSL Reply: 500 This security scheme is not implemented Warning: Server refused AUTH SSL, falling back to insecure plaintext FTP. Command: USER sse450 Reply: 331 User sse450 OK. Password required Command: PASS ********** Reply: 230 OK. Current directory is / Command: SYST Reply: 215 UNIX Type: L8 Command: FEAT Reply: 211-Extensions supported: Reply: UTF8 Reply: EPRT Reply: IDLE Reply: MDTM Reply: SIZE Reply: MFMT Reply: REST STREAM Reply: MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*; Reply: MLSD Reply: PRET Reply: AUTH TLS Reply: PBSZ Reply: PROT Reply: TVFS Reply: ESTA Reply: PASV Reply: EPSV Error: Carriage return without line feed received Public IP denoted by aaa.bbb.ccc.ddd is my external IP of the router. However, CLNT command uses VPN out address. This situation ends up in "directory listing" problem. Any idea how to fix this? Thank you. Best wishes to all list members.