Trouble connecting to FTP using FTPS...

[thecomputerguy]

I have a client who started getting messages that they were connecting insecurely using Filezilla because they were just using the standard FTP protocol (Port 21) to connect to a Synology NAS.

I saw in the FTP setup in the Synology NAS that there was an option for FTPS, so I disabled FTP and then enabled FTPS and it seems to connect properly somewhere between 0%-10%.

Were getting a connection to the FTP over TLS but no directory listing ... or a cannot connect to server ... or something that says Server sent passive reply with unroutable address. Using server address instead.

When I switch it back to regular FTP everything connects fine, it's just not secure.

I just don't know enough about FTPS and I've done some searching but can't find any definitive answers.

Do I need to open more ports or something? for FTPS to work?

 

[mikeroq]

They are using FTP external I take it? Curious as to their use case.

I would use SFTP over FTP/S. Enable SFTP and port forward port 22 to the NAS.
https://www.synology.com/en-us/know..._to_access_files_on_Synology_NAS_via_FTP#t2_5

Even better in my mind would be to VPN into the network. I don't like exposed services on client networks.

 

[thecomputerguy]

They are using FTP external I take it? Curious as to their use case.

I would use SFTP over FTP/S. Enable SFTP and port forward port 22 to the NAS.
https://www.synology.com/en-us/know..._to_access_files_on_Synology_NAS_via_FTP#t2_5

Even better in my mind would be to VPN into the network. I don't like exposed services on client networks.

I believe that this is used as a means for their clients to get data to them, as soon as they receive the data then the folder is empty.

 

[thecomputerguy]

They are using FTP external I take it? Curious as to their use case.

I would use SFTP over FTP/S. Enable SFTP and port forward port 22 to the NAS.
https://www.synology.com/en-us/know..._to_access_files_on_Synology_NAS_via_FTP#t2_5

Even better in my mind would be to VPN into the network. I don't like exposed services on client networks.

Ended up just going with SFTP and didn't have any issues anymore ... thanks!

 

[Sky-Knight]

SFTP > FTPS...

SSH or FTP with SSL wrapper..

Modern secure single port protocol... wrapping 60s era multi session file transfer nightmare with SSL... hmm....