Can't open FTP ports in Airport Extreme router

Hi,
I have three computers networked at home with an Airport Extreme serving as a router to the internet. A couple days ago I set up an FTP server on one computer (Ubuntu Linux). It is running properly and I CAN get into the FTP server via the local area IP address (10.0.1.101). However, no matter what I do I can't get the Airport Extreme to forward any FTP connections from outside. I have port forwarding set up correctly and working correctly for echo (7), daytime (13) ssh (22) http (80) nfs (2049) and vnc (5900). However, even though I set ports 20,21 to be forwarded to the correct computer nmap they are NOT open. (nmap doesn't see them, and telnet to ports 20 or 21 is refused. However nmap on the server locally (ie as localhost) shows that these ports ARE open on the server, and ftpd IS running.) Neither of my mac laptops has ftp file sharing turned on in the preferences (not like this should matter anyway). The Airport Extreme just plain does not open or forward anything to ports 20-21.

I also tried putting the FTP server on a different port (2121), but this doesn't work either. Is this just Apple playing nanny and not allowing me to run FTP for my own good? I have been troubleshooting this for two days and no closer to a solution. I hope someone can offer some advice.

Craig

Powerbook 15", Mac Book 14", Mac OS X (10.5.2), Ubuntu Linux server

Posted on Mar 27, 2008 6:25 AM

Reply
6 replies

Apr 15, 2008 1:10 PM in response to hagerman

I have the same FTP problem. Before my vacation (june 25) it worked all fine, one week later FTP won't work anymore. I tried everything to fix it but it won't work. Also the configuration acces over WAN does not working anymore. Was there an automatic update in my vacation?
I don't know how to fix it.

I have 2 different ISP's in the house so checking is very easy. But after one day trying and testing I can't see that Airport Utility anymore. 😟

Local FTP works fine.

HELP!

Rob

May 15, 2008 9:30 AM in response to hagerman

I believe that I've found the problem with the AirPort/Time Capsule (version 7.3.1) support for FTP.

For whatever reason, when an FTP connection comes-in from the WAN, the NAT translation is reporting the IP address of WAN side of the router instead of the IP address of the actual system connecting from the Internet.

I confirmed this by setting up a FTP server on my Linux machine and watching the connection to the FTP server from the internet. When you perform a:

netstat -an | grep ':21 '

from the Linux shell, you see that the IP address that is connected is your own WAN IP address of your AirPort/Time Capsule.

Apparently the AirPort/Time Capsule recognizes the connection is an FTP client and manipulates the connection in such a way as to report the wrong IP address that is connecting to your FTP server.

This isn't a problem, unless you're using /etc/hosts.allow and /etc/hosts.deny to have port wrapper permit only listed IP addresses to have access to the FTP service. In that case, all connections seem to come in from your router's WAN IP address, so there's no way to distinguish where the connection is coming from.

Apple needs to take a closer look at the version 7.3.1 for the Time Capsule (not sure what the version is for the AirPort Extreme) and fix the reported IP address from the WAN side connection.

Jun 18, 2008 8:22 AM in response to Annorax64

Well I had the same problem and the downgrade suggestion worked. How do you do it? Open the airport configuration program, click on the airport tab and then click on the first tab (overview?) then click on the word version, you should get a pulldown menu where you can select a lower version. I used 7.2.1 and it now works!

Good luck

Jun 22, 2008 5:06 PM in response to fezzie

Hello

I have the same problem. I bought the Airport Extreme 802.11n + Gb Ethernet couple days ago ... the Airport came with firmware version 7.3.1 already so I can't downgrade to 7.2.1 because the Airport Utility will download only the latest version :-/
I was searching the apple download web but there is no direct link to download the firmware (I think that the firmware can be downloaded just thru Airport Utility).

Can please somebody send me the old version on email? karol.olle"at"gmail.com
For the manual update I need these files:
7.2.1.basebinary
7.2.1.basebinary.signature

Thanks in advance 🙂

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Can't open FTP ports in Airport Extreme router

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.