D-Link NetDefend DFL-210 User Manual page 120

6.2.3. File Transfer Protocol
To make it possible to connect to this server from the Internet using the FTP ALG, the FTP ALG and rules should
be configured as follows:
Web Interface
Define the ALG:
1. Go to Objects > ALG > Add > FTP ALG
2. Enter Name: ftp-inbound
3. Check Allow client to use active mode
4. Uncheck Allow server to use passive mode
5. Click OK.
Define the Service:
• Name: ftp-inbound
• Type: select TCP from the dropdown list
• Destination: 21 (the port the ftp server resides on)
• ALG: select the "ftp-inbound" that has been created
1. Go to Objects > Services > Add > TCP/UDP Service
2. Enter the following:
3. Click OK.
Define the Rule - Allow connections to the public IP on port 21 and forward that to the internal FTP server:
1. Go to Rules > IP Rules > Add > IPRule
2. Now enter:
107
Chapter 6. Security Mechanisms