Alias Bug in 18.1: No FTP access from ftp-server after update to 18.1

[hirschferkel]

Since my upgrade to 18.1 our FTP-server can not be accessed from external connections anymore. Users get a wired screen, but the FTP-server is working perfect locally. So the only thing we have changed was the upgrade from 17.7 to 18.1.
Has anyone an idea, what could cause this problems, now? Firewall rules an port forward seem are o.k., as the welcomemessage of the FTP-server is "Welcome ...."?

When you try to connect to the server from local network, you get the required website via port 80 which will not show up from externally. So instead of all ports are being set correctly, it somehow looks like a port-forwarding issue, isn't it?

I really do not have any idea, why the sever will require user login and password, now...

Best

[hirschferkel]

O.k. I found it. Still a BUG in 18.1. Production Series!
It's exactly the issue from:

https://github.com/opnsense/core/issues/2051

After changing the Nat rules from Alias to Network-adress everything runs again! ... never install a new release from OPNsense...

[hirschferkel]

But what can I do now to bring back Aliases?...
As soon as i use an Alias with a portrange it will not work anymore.

[slackadelic]

There's a thread on this already: https://forum.opnsense.org/index.php?topic=7078.0

There's a patch there that was provided as a quick fix

[hirschferkel]

I found the patch here: https://github.com/opnsense/core/issues/2051

But it does not work!
 

[slackadelic]

Instead of going to github, just log into the command line of OPNsense and run this command:

Code: [Select]

opnsense-patch 57f51d2943

[hirschferkel]

As I wrote it did not work after the patch was installed and all services were restarted.

[slackadelic]

Well, the thing is, it IS working.. at least the patch may not have been the issue or resolution.

Looking at your screenshot again, you are connected to the FTP server... so the NAT is working properly.

Is the FTP server passive?

[hirschferkel]

The NAT is only working because I added all rules manually for every single port. I thought I wrote that?
The FTP-Server is active.

And again: It is working with manually added port forwardings, but it is NOTworking with created rules whichone would use in: Firewall > NAT > Port forward > edit forwarding rule > Filter rule association

[hirschferkel]

After Updating to 18.1.1 it runs again. Obviously there were some more issues.