FTP / SFTP Server용 포트포워딩
열어야 할 포트
왜 포트포워딩이 필요한가?
Hosting a file-drop or media-sync endpoint from home historically used FTP — but SFTP (over SSH/22) is dramatically safer and easier to configure with most modern routers and clients.
라우터 브랜드별 단계
TP-Link
- Assign a static LAN IP to the SFTP server
- NAT Forwarding → forward 22 TCP to that IP (change external port to e.g. 22022 to hide from scanners)
- Set up SSH key authentication; disable password login server-side
Netgear
- Port Forwarding → forward TCP 22 (or a custom external port) → server LAN IP
- Consider Netgear ReadyNAS file-share if you already have one — it has SFTP built-in
ASUS
- ASUS routers with USB can host an FTP/SFTP server directly (AiCloud)
- WAN → AiCloud → enable FTP / Samba sharing on the connected USB drive
보안 경고
Plain FTP (21) leaks credentials and data. Always prefer SFTP. Disable root login over SSH, use keys, and run fail2ban or sshguard.