Monday, July 24, 2006

Passive FTP and the Netgear WGT624 router

An ftp site I use suddenly stopped accepting my connections. Since this was out of the blue I found out that the router on the server's side had been updated, but the ports had been reset to what they were before so it should've been working.

The site uses RaidenFTPD and the error message received was 'no one connects to me at ip: xxx,xxx,xxx,xxx port:xxxx'

According to the forums at Raiden that meant the connection was blocked by the router.

After a bit of searching I noticed that the passive ports I setup in raiden wasn't the same ports that got sent out to the client when it sent PASV. Very strange. Apparently someone was messing with the ports!

True enough, I found a setting in the router that said "Disable SPI Firewall". SPI checks the packets so it can handle DOS-attacks. I disabled SPI and everything worked like a charm.

No comments: