It's a good news for me. I will shift from SRX320 to Vyos system. In FTP active mode, the FTP server will push the data channel to the client, the Vyos deems it as a new connection and there is no need with FTP ALG.

In T5376#176807, @svd135 wrote:

The data channels are not established.
As I understand it, the problem is that the required related ports are not forwarded dynamically to translated address

Hello @sdev , could you please help to check if the fix can resolve the problem with FTP ALG? I tested the newest rolling release but the PASV command still causes the data connection gets failed. My testing FTP server and client are both Filezilla product, please correct me if any mistakes I made during the test.

Hello @sdev Sorry to bother you. The issue hasn't been fixed in the recent rolling release: VyOS 1.5-rolling-202309170024

The same situation as @svd135 . The passive FTP data connection now is stopped by the problem with FTP ALG.

Sorry to bother you @sdev , the latest releases of 1.5-rolling-202309080021 and 1.4-rolling-202309070021 still have this problem.

Please help to assign a dev to work with this problem, thanks a lot!

Unless there is something wrong with the firewall ruleset in VyOS any malfunctions in the FTP helper itself will mainly be fixed upstream at the Linux kernel or in this particular case the netfilter team: