{"id":208,"date":"2010-07-19T03:07:49","date_gmt":"2010-07-19T01:07:49","guid":{"rendered":"http:\/\/fifonik.com\/blog\/2010\/07\/19\/thecus-n3200pro-ftps-behind-router\/"},"modified":"2010-07-19T03:07:49","modified_gmt":"2010-07-19T01:07:49","slug":"thecus-n3200pro-ftps-behind-router","status":"publish","type":"post","link":"http:\/\/fifonik.com\/blog\/2010\/07\/19\/thecus-n3200pro-ftps-behind-router\/","title":{"rendered":"Thecus N3200PRO: FTPS behind router"},"content":{"rendered":"

Official firmware supports FTPS: Network | FTP > Secure FTP (Explicit) == Enable (I use 1.00.05, in other versions it could be in different place).<\/p>\n

However, if your NAS is located behind the router (a bit typical situation, isn't it?) you couldn't use FTPS for sharing files. The problem is simple: by default FTPS will choose port from range 1024-65535, but your router couldn't sniff the port number and open incoming port because the information is already encrypted.<\/p>\n

I've found very simple hack: by modifying FTP daemon's<\/a> option you can narrow the ports range and forward all of them to your NAS.<\/p>\n

1. Activate Secure FTP on your NAS.
2. Install and enable SSHD module<\/a>.
3. Connect to device by SSH and execute command:<\/p>\n

\/opt\/bin\/sqlite \/app\/cfg\/conf.db "update conf set v='2 -p 3000:3010' where k='ftp_ssl'"<\/pre>\n
The new option ("-p 3000:3010") is specified the range of ports which ftp daemon will be used.
4. Re-configure your router and forward all incoming connections to ports 3000-3010 to the NAS.
5. Disable SSHD module.<\/p>\n
Voila.<\/p>\n
P.S. When the hack is applied you shouldn't make any changes on FTP configuration page and both radio buttons for "Secure FTP" option will not be checked. It's OK.
<\/span> 
P.P.S. If you would like to reverse the hack just go to FTP configuration page, check one of "Secure FTP" radio buttons and "press Apply" button.<\/p>\n
UPDATE:<\/strong>
To connect using FTPS you can use WinSCP<\/a> client. Enter IP address\/domain name, Port=21, File Protocol=FTP + TLS Explicit encryption. Then check "Advanced options", on page "Connection" check "Passive mode" (it is checked by default) and then on page "FTP" check "Force IP address for passive mode connection".<\/p>\n
Another way to connect to the NAS using FTPS is Total Commander's integrated ftp client. Just enter 'ftps:\/\/domain' and check SSL\/TLS checkbox.<\/p>\n","protected":false},"excerpt":{"rendered":"
Official firmware supports FTPS: Network | FTP > Secure FTP (Explicit) == Enable (I use 1.00.05, in other versions it could be in different place). However, if your NAS is located behind the router (a bit typical situation, isn't it?) you couldn't use FTPS for sharing files. The problem is simple: by default FTPS will […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[130,131,185,90],"class_list":["post-208","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-n3200pro","tag-nas","tag-thecus","tag-90"],"_links":{"self":[{"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/posts\/208","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/comments?post=208"}],"version-history":[{"count":0,"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/posts\/208\/revisions"}],"wp:attachment":[{"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/media?parent=208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/categories?post=208"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/fifonik.com\/blog\/wp-json\/wp\/v2\/tags?post=208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}