Hello Ulf N ,

Thank you for reaching out to the community, can you share the screenshot of the DNAT rules you created ?
And can you share packetfilter.log while accessing...

It's already in the text above.
But also as a picture

FTP/S (active-mode)

mandatory (FW-Rule)

FTP (passiv-mode)

FTP-Proxy-Status



FTP proxy exceptions

Hallo Ulf,

Please replace the images above with pics of the Edits of the rules.

Also, add a pic of 'Allowed Networks' on the 'Global' tab of 'Web Protection >> FTP'.

Cheers - Bob

done - see above

Hi Ulf,

I'v posted it here even many times, but please:

Stop using FTPS!

It is a bad hack and a pain on a firewall. If you don't really understand what is going on with FTPS you will get stuck.

Instead use SFTP which is a completely different protocol (use only TCP/22).

If you don't mind, analyse the packetfilter.log, there you will see what is getting blocked.

Hello, Josef,

That doesn't help me and I know it's not optimal.
But you have certainly read the whole article and looked at the options for setting up the camera above.

Then, I would like to establish the connection but not unsecured

Hi Ulf,

I'm sorry for my drastic post, but it is annoying to see this same problems over the last years.

I know that most of this Io(u)T don't support SFTP but as said, stop using FTPS especially if you don't know exactly what is going on. See also FTPS Firewall incompatibilities.

If you really want to use it, check the packetfilter.log for dropped packets from your camera IP and fix/adapt you according NAT/Firewall-Rules.