Ftp from LAN to WAN not working

[Assistec2025]

Good morning

I’m trying to use a RUT301 to separate a local cnc machine network from the whole factory network.

I have a 192.168.1.x LAN and 192.168.0.x WAN , the router have fixed ip on both networks: 192.168.1.2 on lan and 192.168.0.155 on wan

The main problem I have is that an FTP serivce running on a machine placed on local network is apaprently not reachable from WAN.

I set up the forward rules and even the helper for conntrack as you stated on your guides (the helper is needed for passive mode I understand) but the communication is still impossible , both in active and passive ftp mode. Seems that the packages are dropped, NMAP from wan show that both ports 20 and 21 are opened “filtered”.

The ftp server logfile shows absolutely nothing ! no accesses from anything

In the past I setup many forward rules for modbus (port 502) or mtconnect cnc’s… on about 20 units RUT300 without any problem so I know how to setup a forward rule (very simple !)

but this time it don’t work (is the first time I use ftp fprward indeed)

the router is RUT301 with RUT301_R_00.07.17.5 formware

any ideas ?

Thank you

[anon65719490]

Greetings,

If I understood your setup correctly, you are trying to access an FTP server located on the RUT’s LAN from the WAN side, correct?

If that’s the case, you’ll need to ensure that traffic forwarding from the WAN zone to the LAN zone is allowed. This can be done by editing the WAN zone settings under Network → Firewall → Zones and enabling forwarding to LAN (refer to screenshot below).

That should generally be sufficient for FTP access to work.

If the inquiry or end goal of your setup differs, could you please clarify it and provide any relevant additional information, such as your network topology, configuration details, etc.?

Best regards,