Hello there,
I recently bought the Asustor AS5104T and have it running on my home network with the latest OS release.  Internet access is through my router, so the NAS is behind a NAT.  I have the FTP ports forwarded through my router and am able to connect, however passive mode does not work.  I have DDNS setup and the NAS does know my WAN IP.  I've read through the ProFTPD documentation online and there is an option which I've added to the proftpd.conf file to enable Masquerading, which does allow passive mode to work properly.  However this option is not available through the ADM interface and any change to the  FTP settings seems to overwrite the proftpd.conf file.
Is there any way to avoid this?  Any chance that the masquerade option can be added to the FTP advanced settings page?
Thanks for your help.
			
			
									
						
										
						ProFTPD behind a NAT
- 
				zavar
 - Posts: 3
 - youtube meble na wymiar Warszawa
 - Joined: Tue Mar 10, 2015 1:27 pm
 
- 
				crazynas
 - Posts: 222
 - Joined: Mon Feb 16, 2015 10:34 pm
 
Re: ProFTPD behind a NAT
Hi
I don't understand.
Can you specific your req ??
			
			
									
						
										
						I don't understand.
Can you specific your req ??
- 
				zavar
 - Posts: 3
 - Joined: Tue Mar 10, 2015 1:27 pm
 
Re: ProFTPD behind a NAT
Sorry, I didn't describe it well.
Using the ADM FTP configuration settings for my NAS which is behind a NAT I am unable to get FTP passive mode working. In order to enable the passive connections, I had to SSH into the NAS and manually edit the proftpd.conf file located at /volume0/usr/builtin/etc/proftpd to include the following line:
MasqueradeAddress my.domain.com
If any changes are made through the ADM FTP configuration settings, the "manual" changes to the proftpd.conf file are overwritten. I would like to see an optional configuration setting added to the ADM FTP settings page to incorporate the MasqueradeAddress variable, so that it doesn't need to be manually modified.
			
			
									
						
										
						Using the ADM FTP configuration settings for my NAS which is behind a NAT I am unable to get FTP passive mode working. In order to enable the passive connections, I had to SSH into the NAS and manually edit the proftpd.conf file located at /volume0/usr/builtin/etc/proftpd to include the following line:
MasqueradeAddress my.domain.com
If any changes are made through the ADM FTP configuration settings, the "manual" changes to the proftpd.conf file are overwritten. I would like to see an optional configuration setting added to the ADM FTP settings page to incorporate the MasqueradeAddress variable, so that it doesn't need to be manually modified.
- 
				zurk
 - Posts: 43
 - Joined: Sat Feb 28, 2015 11:27 am
 
Re: ProFTPD behind a NAT
proFTPD is insecure. expose your ssh port on a non standard port mapping and run SFTP instead.
			
			
									
						
										
						- 
				Elrique64
 - Posts: 222
 - Joined: Wed Feb 26, 2014 5:26 am
 
Re: ProFTPD behind a NAT
I think you are asking to have the settings available to edit from within the ADM and not need to use an app like WinSCP to get into the NAS to edit them, right?zavar wrote:Sorry, I didn't describe it well.
Using the ADM FTP configuration settings for my NAS which is behind a NAT I am unable to get FTP passive mode working. In order to enable the passive connections, I had to SSH into the NAS and manually edit the proftpd.conf file located at /volume0/usr/builtin/etc/proftpd to include the following line:
MasqueradeAddress my.domain.com
If any changes are made through the ADM FTP configuration settings, the "manual" changes to the proftpd.conf file are overwritten. I would like to see an optional configuration setting added to the ADM FTP settings page to incorporate the MasqueradeAddress variable, so that it doesn't need to be manually modified.
Settings like those you describe are for a more advanced user/situation than the defaults the ADM was written to. As such, much of this functionality gets dummied down to fit the customers and prevent them breaking something that they shouldn't be messing with unless they know what they are doing.
I really wish there was a feature requests forum here, to identify what the customers want on their NAS's, functions, etc. Or to identify what they want BACK. (Icons?) This would be a prime candidate for a request of that nature.
- 
				zavar
 - Posts: 3
 - Joined: Tue Mar 10, 2015 1:27 pm
 
Re: ProFTPD behind a NAT
That's exactly what I am looking for.  I know it's a more advanced function and not something everyone would want, but it doesn't really seem that different to me than someone wanting to change the default ports.
			
			
									
						
										
						- 
				Elrique64
 - Posts: 222
 - Joined: Wed Feb 26, 2014 5:26 am
 
Re: ProFTPD behind a NAT
I can understand you wanting to be able to edit this from within the ADM.  It makes perfect sense, but, I don't know if anyone else has ever asked for it...  
You might try putting in a ticket through Asustor's support system. They might get it pushed out that way, and you could help them beta test it. Just a thought.
			
			
									
						
										
						You might try putting in a ticket through Asustor's support system. They might get it pushed out that way, and you could help them beta test it. Just a thought.