topic Re: Port forwarding in Broadband

Port forwarding

Studiosoft — Fri, 01 Jul 2022 12:28:20 GMT

I am trying to set up port forwarding on a Huawei HG633.

I have followed the user guide and believe I have the settings correct yet I cannot make an FTP connection.

I have seen other people having similar problems with Talktalk routers, is this a known issue with this model?

Re: Port forwarding

Anonymous — Fri, 01 Jul 2022 12:30:57 GMT

Hello,

@KeithFrench - Would you be able to offer any advice please?

Thanks

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 13:47:21 GMT

Hi @Studiosoft

@Anonymous has asked me to help you. There is no known issue with the HG633 & FTP port forwarding. If you would like to describe your scenario to me in as much detail as possible & include the port mapping & application screenshots so I can check them for you.

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 14:00:32 GMT

Hi Keith

Are these the screen shots you require

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 14:03:32 GMT

That is a start, what FTP mode is the client/server using?

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 14:12:59 GMT

I have tried both plain and SFTP - I am using Filezilla

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 14:21:06 GMT

No, the FTP mode is either Passive or Active & will determine the direction that the data channel is setup in, which mode is the connection negotiating? If in doubt, PM the main activity window of FileZilla server or log the FileZilla client to a file & PM me the contents of that.

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 14:26:15 GMT

It is set to passive

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 14:41:58 GMT

Thanks for that, this will mean that the data channel is originated from the client to the server, using the TCP port that the server tells the client to use (could be any port). This means that you may need another port forwarding application configured for that. However, before going down that route, a few more basics:-

I am assuming that the FTP server is on the local device, which looks like a pi?
Does the pi have a firewall running & if so, have you allowed an inbound rule for TCP port 21?
With the FTP server running and you go to a port checking website such as https://portchecker.co/ does TCP port 21 report as open?
Are you trying to test the FTP access from a client that is also locally connected to your router?

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 14:48:44 GMT

Yes the server is on a Pi

No firewall as far as I know

Port 21 is closed - I presume that is the issue

I have tried from a local machine and another dev has tried from another location

I am new to this port forwarding although the other chap has some experience with it, I do appreciate your help with this.

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 15:14:59 GMT

Yes, port 21 closed is the issue, stick with the port checking website until we can get it to report as open. The port forwarding in the router is correct for that port. A few more questions then:-

How does the pi get its IP address, via DHCP from the router or is it manually configured on the raspberry?
I assume it connects to the HG633's wireless and not via an extender or similar?
Is the FTP server listening on the correct interface when you test it?

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 15:24:43 GMT

1. DHCP - I can access the pi via ssh on that IP.

2. Wireless - I have full access from a host computer

3. How would I test which interface it is listening on?

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 15:28:26 GMT

So the pi does not connect directly to the wireless of the HG633 then, or can you explain your answer to #2 in more detail, please? Is the FTP server FileZilla or is that just the client?

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 15:34:39 GMT

The Pi is on the wifi from the HG633, I can ssh to it from a Linux computer on the same router.

"Is the FTP server FileZilla or is that just the client?"

We are trying to access the Pi as a remote server in Filezilla. Does that make sense?

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 15:37:20 GMT

Let me rephrase that last question - what FTP server are you using on the pi? Only then can I try to tell you where to check what interface the FTP server is listening on.

Re: Port forwarding

Studiosoft — Fri, 01 Jul 2022 15:57:11 GMT

"what FTP server are you using on the pi?"

I don't know, the Pi is running Apache server but I am not sure if there is an FTP server running on there.

Our aim is to be able to FTP files to the Pi over WiFi at a remote location.

I need to check with my colleague who may be able to answer your question.

This is all new to me and the documentation available is poor to say the least.

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 21:01:38 GMT

The trouble is, that most FTP servers require configuration before they can be used. This may well be why it may not have port 21 open on the correct interface.

In the meantime, please can you try running this command on your pi from a terminal or command prompt or whatever the pi has. Then get me the output from it:-

netstat --listen

If you want, PM it to me.

Re: Port forwarding

KeithFrench — Fri, 01 Jul 2022 21:04:11 GMT

Just saw another thing on a quick Goggle search about the pi OS, it does have a firewall, called iptables, please can you check if this is installed?

Re: Port forwarding

Studiosoft — Sat, 02 Jul 2022 07:49:30 GMT

I do hope I am not wasting your time with this.

As I mentioned, I am new to port forwarding and I have always felt that FTP Server is the wrong setting to use so it may save time if I clarify a few things about our intentions.

The Raspbery pi will be at a remote location and we intend to FTP files to it from our office.

I use ssh to communicate with the Pi and it is operating in kiosk mode without access to the desktop.

I always felt that the mode set in Filezilla should be some kind of ssh.

Re: Port forwarding

Studiosoft — Sat, 02 Jul 2022 09:32:29 GMT

Thanks for your help yesterday, we have managed to get it sorted. There was a conflict on port 21 which was blocking the connection. Changing to port 22 has solved the issue.