tiny firewall blocking ftp without warning

[Erik Austin]

hello, I'm using this;
>tiny desktop firewall 2005 pro v6.5.126
and it stops ftp transfers about 20 to 25 seconds into the transfer.
there's no indication of why, and I can't see anything obvious in the activity monitor.
if I disable the firewall part of tiny firewall pro the transmission resumes.

I've been disabling the firewall when using ftp for a few years now to get around the problem, but I really need to sort this out.

I don't have the manual, and I can't find the manual anywhere for download. not that it would probably do me much good... cos I don't know enough about this stuff.

is 'itsme' still hanging around in here?

today I made a rule in
network protection/local rules
to allow all ftp traffic for the trusted group, but it doesn't work. I even made it high priority - still doesn't work.

so I'm at a loss. can somebody please help?

[Stem]

Hello Erik Austin,
What application are you using for the FTP. Is this on Passive or Active mode?
From a base install of TFP, I am seeing no problem with Passive connections. If you are using active connections, where a random inbound connection is required(outbound connect+1), this may be getting silently blocked. (are you behind a router?)

Regards,
Stem

[Mr. Y]

I have had problems (but different from yours) with that version- I use v6.5.92

[Erik Austin]

short answer is; I was using active ftp - didn't know there was a difference.

using passive ftp it works just fine.
thankyou very much for the tip!

found this in wikipedia
It is hard to filter active mode FTP traffic on the client side by using a firewall, since the client must open an arbitrary port in order to receive the connection. This problem is largely resolved by using passive mode FTP.

----

as for problems with version 6.5.92;
126 fixes a major issue where clicking 'trust it' gives you a BSOD, or something like that :)

you can get it here if you have trouble finding it: Tiny Firewall 6.5.126 (http://members.westnet.com.au/eksere/TinyFirewallPRO-6.5.126.exe)
(126 is a later version than 92)

[Stem]

Hello Erik Austin,
Good to hear you have now resolved the problem.

For info:
With Passive FTP, there is only a need to allow outbound connections, these basically are:
Allow outbound connection to remote port 21
Allow outbound connection to remote ports 1024-65535

When using active FTP, addition rule needs to be added:
Allow inbound connection local ports 1024-65535 remote port 20