ftp download

[#1]

I download files from ftp site, if enable virus scan under protection file, can' t download file, what' s problem?

[#2]

What cause this? If I set service is " ftp" . can' t access ftp server. So, I set service is " any" .

[rwpatterson]

Browsers and FTP programs automatically know that FTP is TCP port 21. If the uri ends in " :xxx" , that number will tell the client to use a non-standard port. That will need to be defined as an FTP helper service for FTP to work correctly. Look into what unit is trying to get to the FTP site and see if the link is standard or not.

[#4]

Thanks. what' s meaning of " what unit is trying to get to the FTP site and see if the link is standard or not" ?How to setup FTP helper service for FTP?

[rwpatterson]

ORIGINAL: kcpc what' s meaning of " what unit is trying to get to the FTP site and see if the link is standard or not" ?

What PC is trying to FTP?

ORIGINAL: kcpc How to setup FTP helper service for FTP?

From CLI: (example from my 1000a. Yours should be similar) $ config system session-helper (session-helper) $ show config system session-helper edit 1 set name pptp set port 1723 set protocol 6 next edit 2 set name h323 set port 1720 set protocol 6 next edit 3 set name ras set port 1719 set protocol 17 next edit 4 set name tns set port 1521 set protocol 6 next edit 5 set name tftp set port 69 set protocol 17 next edit 6 set name rtsp set port 554 set protocol 6 next edit 7 set name rtsp set port 7070 set protocol 6 next edit 8 set name ftp set port 21 set protocol 6 next edit 9 set name mms set port 1863 set protocol 6 next edit 10 set name pmap set port 111 set protocol 6 next edit 11 set name pmap set port 111 set protocol 17 next edit 12 set name sip set port 5060 set protocol 17 next edit 13 set name dns-udp set port 53 set protocol 17 next end (session-helper) $ Simply find the next available number:

 (session-helper) $ edit 14
 (session-helper) $ set name ftp
 (session-helper) $ set port xxx (new port number here)
 (session-helper) $ set protocol 6
 (session-helper) $ end
 $

[#6]

I found no any session-helper service on my unit. Need to add ftp helper service? If yes, which port number set on ftp helper service( seems that random port comes out)?

[rwpatterson]

What firmware version are you currently using?

[#8]

3.00 MR6 patch 3. BTW, I found a " set tcp-timewait-timer 120 " on " config system global" , but can' t read it on MR6 CLI Reference manual. And my unit has the " set ip-src-port-range 1024-25000" , but default is " set ip-src-port-range 1024-4999" . Problem with this two parameters?

[#9]

I reset " ip-src-port-range" to default, but can' t download if I enable virus scan.

[#10]

OK now. The problem is no session-helper for ftp. I set only session-helper for ftp. Need to set other protocol for session-helper, i.e, pptp, h323,ras,tns,tftp,rtsp,mms,pmap,pmap,sip and dns-udp?

[rwpatterson]

The list I pasted above is the default. You may copy and paste that into your FGT config.