FTP / SFTP Server 的端口转发
需要开放的端口
为什么需要端口转发？
Hosting a file-drop or media-sync endpoint from home historically used FTP — but SFTP (over SSH/22) is dramatically safer and easier to configure with most modern routers and clients.
按路由器品牌逐步操作
TP-Link
- Assign a static LAN IP to the SFTP server
- NAT Forwarding → forward 22 TCP to that IP (change external port to e.g. 22022 to hide from scanners)
- Set up SSH key authentication; disable password login server-side
Netgear
- Port Forwarding → forward TCP 22 (or a custom external port) → server LAN IP
- Consider Netgear ReadyNAS file-share if you already have one — it has SFTP built-in
ASUS
- ASUS routers with USB can host an FTP/SFTP server directly (AiCloud)
- WAN → AiCloud → enable FTP / Samba sharing on the connected USB drive
安全警告
Plain FTP (21) leaks credentials and data. Always prefer SFTP. Disable root login over SSH, use keys, and run fail2ban or sshguard.