CacheGuard Help

Could that be because your example is within the RFC range, whilst mine and FileZilla's is above i.e. add a zero?
I've not had time to change mine to see if that is the reason, but it would be good for us all to know.

Success, thank you

Thanks David, option 2 sounds worth pursuing. My Certificate is from CA GeoTrust.

You may find this useful. https://wiki.filezilla-project.org/Network_Configuration#Passive_mode_2 And this in particular: "If you do not want to allow incoming connections on all ports, or if you have a NAT router, you need to tell FileZilla Server to use a specific range of ports for passive m...

Please let me know when the patch is available as I'm probably sticking with option 1.
Option 2 seems complex and potentially replacing the security already implemented by the Windows Server or do I misunderstand?

Thanks, that admin access now deleted.
Awaiting advice on how we solve the passive ports issue, which briefly work whilst that rule was live.

Applying that, FTP worked fine but I have lost access to CG via WebGUI and Putty.
How do I list external rules so I can check that
firewall external del All
worked?
All LAN use impacted, so this is urgent please.

I confirm FTP client uses passive when triggered by the server.
I've removed the PAT value and applied. Still getting no directory listing or file transfer.

That's great, thanks.

Thanks. Both my rules above and your's enable an external FTP client to connect to my FTP server, however no directory listing or file transfer is occuring. This usually indicates failure to open the passive ports. What port range is CG's ftp_passive using or expecting, as I might adjust the server ...