Redirección de puertos para FTP / SFTP Server
Puertos a abrir
¿Por qué es necesaria la redirección de puertos?
Hosting a file-drop or media-sync endpoint from home historically used FTP — but SFTP (over SSH/22) is dramatically safer and easier to configure with most modern routers and clients.
Paso a paso por marca
TP-Link
- Assign a static LAN IP to the SFTP server
- NAT Forwarding → forward 22 TCP to that IP (change external port to e.g. 22022 to hide from scanners)
- Set up SSH key authentication; disable password login server-side
Netgear
- Port Forwarding → forward TCP 22 (or a custom external port) → server LAN IP
- Consider Netgear ReadyNAS file-share if you already have one — it has SFTP built-in
ASUS
- ASUS routers with USB can host an FTP/SFTP server directly (AiCloud)
- WAN → AiCloud → enable FTP / Samba sharing on the connected USB drive
Aviso de seguridad
Plain FTP (21) leaks credentials and data. Always prefer SFTP. Disable root login over SSH, use keys, and run fail2ban or sshguard.