How to block FTP access from WAN on RT-N66U

[sinshiva]

cool, try this;

iptables -A INPUT -i ppp0 -p tcp --dport 21 -j DROP

 

[mberteotti]

cool, try this;

iptables -A INPUT -i ppp0 -p tcp --dport 21 -j DROP

Great! It works fine now (with insert option "-I" and not append one "-A").

Thank you.

 

[Ameriza]

I've a RT-N66U with 3.0.0.4.374.35_4 FW. I'd like to use FTP only on intranet and should be not accessible from WAN. How can I do that? By default FTP is accessible from WAN (port 21 is open on WAN).

For example on rt-n56u ther is a switch that turns access to FTP server from WAN on/off... Not found in RT-N66U.

Thank you.

Marco B.

the simplest solution i found is to create a rule in wan -> virtual server and redirect port 21 FTP is using to a black hole; i used the router ip with port 2121 for example

 

[ColinTaylor]

the simplest solution i found is to create a rule in wan -> virtual server and redirect port 21 FTP is using to a black hole; i used the router ip with port 2121 for example

This thread is over 3 years old. There's been a menu option to disable WAN FTP access since April 2014.

 

[Ameriza]

not entirely true, on AC66U_B1 the optios is not there ..so my fix might help others

 

[octopus]

not entirely true, on AC66U_B1 the optios is not there ..so my fix might help others

Well its there. "Enable WAN access" Have you upgraded from older sw without factory reset? That might be your problem.

 

[ColinTaylor]

not entirely true, on AC66U_B1 the optios is not there ..so my fix might help others

Maybe you're not using Merlin's firmware (even though this is a Merlin forum)?