#31 Passive Mode where the NAT server is not translating the IP

[Isabel Mendez]

If the IP replied by the server with the PASV command is not translated by the NAT server, the data socket cannot be opened.

If it is not possible to add those rules to the NAT server due to security constraints, you can use this modified version of FTPConnection.java where the method sendPassiveMode() is using the original IP or DNS provided in the host property and the port given by the server in the PASV command to open the data socket (lines 688 - 691).

This change also can resolve the vulnerability of the client due to the PASV command.

[Isabel Mendez]

FTPConnection.java modified

[Kevin C.]

Any updates on this? Or particular reason this patch was never accepted? We're encountering the same issue.

[Arnold Maderthaner]

provided by public void setOverrideHostForPassiveConnections(InetAddress overridePassiveAddress) in version 1.0