Changes

{{WIP box|}}

{{WIP box|}}

SME Server offers a ftp server, which is Proftpd. If enabled it  allows you to access to the Pirmary ibay files folder with anonymous access, and to any content your user is allowed to, if authenticated, inside /home/e-smith/files.

SME Server offers a ftp server, which is Proftpd. If enabled it  allows you to access to the Primary ibay files folder with anonymous access, and to any content your user is allowed, if authenticated, inside /home/e-smith/files.

Prior to SME 10 ftp was using cleat text communication ('''FTP'''), allowing one to listen to your password and files exchanged on the network. Now TLS is enforced by default ('''FTPs'''), and it is suggested to keep it enabled.

Prior to SME 10 ftp was using cleat text communication ('''FTP'''), allowing one to listen to your password and files exchanged on the network. Now TLS is enforced by default ('''FTPs'''), and it is suggested that you keep it enabled.

While you might be used to the traditional port 21 for file transfer protocol ('''FTP'''), this page is here to help you having a steady access to your ftp server, by understanding it, and enabling the extra needed ports.

While you may be used to the traditional port 21 for file transfer protocol ('''FTP'''), this page is here to help you have steady access to your ftp server, by understanding it, and enabling the extra needed ports.

Your server is using  

Your server is using  

== FTP connection modes : active versus passive ==

== FTP connection modes : active versus passive ==

SME by default offers both active and passive mode when you are on LAN. However, as soon as you try to access from a  remote location you will hist some difficulties depending on the situation.

SME by default offers both active and passive mode when you are on LAN. However, as soon as you try to access from a  remote location you will have some difficulties depending on the situation.

By default for passive connection Proftpd will use ports from 1024 and up, which means that you must forward ''all'' ports 1024-65535 from the NAT to the FTP server!  And you have to allow many (possibly) dangerous ports in your fire-walling rules!  Not a good situation.

By default, for passive connection,  Proftpd will use ports from 1024 and up, which means that you must forward ''all'' ports 1024-65535 from the NAT to the FTP server!  And you have to allow many (possibly) dangerous ports in your fire-walling rules!  Not a good situation.

==== the modes ====

==== The Modes ====

===== active =====

===== active =====

* FTP server's ports > 1024 to remote ports > 1024 (Server sends ACKs (and data) to client's data port)

* FTP server's ports > 1024 to remote ports > 1024 (Server sends ACKs (and data) to client's data port)

==== examples ====

==== Examples ====

===== SME is server-gateway connected to Internet - Client is remote behind a NAT =====

===== SME is server-gateway connected to Internet - Client is remote behind a NAT =====