ProFTPD behind a NAT

Share your awesome tips and tricks here.
zavar
Posts: 3
youtube meble na wymiar Warszawa
Joined: Tue Mar 10, 2015 1:27 pm

ProFTPD behind a NAT

Post by zavar »

Hello there,

I recently bought the Asustor AS5104T and have it running on my home network with the latest OS release. Internet access is through my router, so the NAS is behind a NAT. I have the FTP ports forwarded through my router and am able to connect, however passive mode does not work. I have DDNS setup and the NAS does know my WAN IP. I've read through the ProFTPD documentation online and there is an option which I've added to the proftpd.conf file to enable Masquerading, which does allow passive mode to work properly. However this option is not available through the ADM interface and any change to the FTP settings seems to overwrite the proftpd.conf file.

Is there any way to avoid this? Any chance that the masquerade option can be added to the FTP advanced settings page?

Thanks for your help.
crazynas
Posts: 222
Joined: Mon Feb 16, 2015 10:34 pm

Re: ProFTPD behind a NAT

Post by crazynas »

Hi
I don't understand.
Can you specific your req ?? ;)
zavar
Posts: 3
Joined: Tue Mar 10, 2015 1:27 pm

Re: ProFTPD behind a NAT

Post by zavar »

Sorry, I didn't describe it well.

Using the ADM FTP configuration settings for my NAS which is behind a NAT I am unable to get FTP passive mode working. In order to enable the passive connections, I had to SSH into the NAS and manually edit the proftpd.conf file located at /volume0/usr/builtin/etc/proftpd to include the following line:

MasqueradeAddress my.domain.com

If any changes are made through the ADM FTP configuration settings, the "manual" changes to the proftpd.conf file are overwritten. I would like to see an optional configuration setting added to the ADM FTP settings page to incorporate the MasqueradeAddress variable, so that it doesn't need to be manually modified.
zurk
Posts: 43
Joined: Sat Feb 28, 2015 11:27 am

Re: ProFTPD behind a NAT

Post by zurk »

proFTPD is insecure. expose your ssh port on a non standard port mapping and run SFTP instead.
Elrique64
Posts: 222
Joined: Wed Feb 26, 2014 5:26 am

Re: ProFTPD behind a NAT

Post by Elrique64 »

zavar wrote:Sorry, I didn't describe it well.

Using the ADM FTP configuration settings for my NAS which is behind a NAT I am unable to get FTP passive mode working. In order to enable the passive connections, I had to SSH into the NAS and manually edit the proftpd.conf file located at /volume0/usr/builtin/etc/proftpd to include the following line:

MasqueradeAddress my.domain.com

If any changes are made through the ADM FTP configuration settings, the "manual" changes to the proftpd.conf file are overwritten. I would like to see an optional configuration setting added to the ADM FTP settings page to incorporate the MasqueradeAddress variable, so that it doesn't need to be manually modified.
I think you are asking to have the settings available to edit from within the ADM and not need to use an app like WinSCP to get into the NAS to edit them, right?

Settings like those you describe are for a more advanced user/situation than the defaults the ADM was written to. As such, much of this functionality gets dummied down to fit the customers and prevent them breaking something that they shouldn't be messing with unless they know what they are doing.

I really wish there was a feature requests forum here, to identify what the customers want on their NAS's, functions, etc. Or to identify what they want BACK. (Icons?) This would be a prime candidate for a request of that nature.
zavar
Posts: 3
Joined: Tue Mar 10, 2015 1:27 pm

Re: ProFTPD behind a NAT

Post by zavar »

That's exactly what I am looking for. I know it's a more advanced function and not something everyone would want, but it doesn't really seem that different to me than someone wanting to change the default ports.
Elrique64
Posts: 222
Joined: Wed Feb 26, 2014 5:26 am

Re: ProFTPD behind a NAT

Post by Elrique64 »

I can understand you wanting to be able to edit this from within the ADM. It makes perfect sense, but, I don't know if anyone else has ever asked for it... :)

You might try putting in a ticket through Asustor's support system. They might get it pushed out that way, and you could help them beta test it. Just a thought.