Block external Firewall access, allow FTP thru

venture996

We want to block outside access to the firewall, but allow FTP and SFTP access through to a specific server. What's the right way to do this?

PeterUK

By default outside access is blocked if you only have one WAN IP you make a virtual server for FTP/SFTP port 21 and port 22 and the passive ports range to the server IP make firewall rules to allow them ports from like WAN to LAN1

[Deleted User]

Hello @venture996 and welcome to the forum!

Yes, @PeterUK is right.

Per default the firewall rule WAN-to-ZyWALL does not allow to access the device per web interface or SSH.

If you need more specific instructions to setup your port forwarding, you can stick to this guide here:

https://support.zyxel.eu/hc/en-us/articles/360001390934-NAT-Rule-Configuration-on-a-USG-Port-Forwarding-

I hope this helps!

Best regards

Lukas