Port forwarding cho FTP / SFTP Server
Các cổng cần mở
Tại sao cần port forwarding?
Hosting a file-drop or media-sync endpoint from home historically used FTP — but SFTP (over SSH/22) is dramatically safer and easier to configure with most modern routers and clients.
Từng bước theo thương hiệu router
TP-Link
- Assign a static LAN IP to the SFTP server
- NAT Forwarding → forward 22 TCP to that IP (change external port to e.g. 22022 to hide from scanners)
- Set up SSH key authentication; disable password login server-side
Netgear
- Port Forwarding → forward TCP 22 (or a custom external port) → server LAN IP
- Consider Netgear ReadyNAS file-share if you already have one — it has SFTP built-in
ASUS
- ASUS routers with USB can host an FTP/SFTP server directly (AiCloud)
- WAN → AiCloud → enable FTP / Samba sharing on the connected USB drive
Cảnh báo bảo mật
Plain FTP (21) leaks credentials and data. Always prefer SFTP. Disable root login over SSH, use keys, and run fail2ban or sshguard.