This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Transparent FTP not working v8.001

I'm testing a v8.001 appliance and I'm having trouble getting FTP to connect. I setup the transparent proxy as normal, adding my local networks.

I make sure the FTP box is cleared on the workstations proxy settings.

I see the following in the FTP log:

2010:09:17-13:05:02 pipe frox[20810]: Connect from 10.1.1.149
2010:09:17-13:05:02 pipe frox[20810]: ... to 63.245.208.138()
2010:09:17-13:05:03 pipe frox[20811]: Connect from 10.1.1.149
2010:09:17-13:05:03 pipe frox[20811]: ... to 63.245.208.138()

On the client it looks like:

ftp> open 63.245.208.138
Connected to 63.245.208.138.
220-
Connection closed by remote host.
ftp>

Same sort of connection closed error using WINSCP.

When I disable the FTP proxy and open a hole in the firewall, FTP to the same site works fine.

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago

When I disable the FTP proxy and open a hole in the firewall, FTP to the same site works fine.

I understand that the HTTP Proxy handles FTP for web browsers when it's used in a non-transparent mode. Also, that browsers use the FTP Proxy in transparent mode when the HTTP/S Proxy is in a transparent mode. Also, that if the Astaro FTP Proxy is in "Both" or "non-transparent" mode, an FTP client with the proper proxy settings will use the FTP Proxy.

Another fun fact. Works in XP but not in Windows 7.

I'm with Barry in being surprised to learn that the Astaro FTP Proxy works in the "Transparent" mode for an FTP client; can you confirm that?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Billybob over 15 years ago in reply to BAlfson
I'm with Barry in being surprised to learn that the Astaro FTP Proxy works in the "Transparent" mode for an FTP client; can you confirm that?

Kai explained this a few months ago
The basic rule for the FTP-Proxy is, that you only use it with real FTP-Clients. That, and only that, is the use case for the frox ftp proxy.

If you want to use a web browser, you can simply use the HTTP-Proxy, which then also handles the FTP protocol

Since invoking ftp from windows command line basically runs a non gui ftp client, frox will handle those requests in transparent mode.

Regards
Bill.

Edit: I just tried ftp.astaro.com on command line with vista and windows7 and don't see any problems but I am on a newer version of astaro.

2010:11:07-23:02:38 gatekeeper frox[29864]: Connect from 192.168.0.222
2010:11:07-23:02:38 gatekeeper frox[29864]: ... to 80.237.192.99()
2010:11:07-23:03:15 gatekeeper frox[29864]: PORT: 207.***.***.***:48217
2010:11:07-23:03:24 gatekeeper frox[29864]: PORT: 207.***.***.***:44292
2010:11:07-23:03:34 gatekeeper frox[29864]: PORT: 207.***.***.***:43436
2010:11:07-23:03:39 gatekeeper frox[29864]: Server closed the control connection
2010:11:07-23:03:39 gatekeeper frox[29864]: Closing session
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Billybob over 15 years ago in reply to BAlfson
I'm with Barry in being surprised to learn that the Astaro FTP Proxy works in the "Transparent" mode for an FTP client; can you confirm that?

Kai explained this a few months ago
The basic rule for the FTP-Proxy is, that you only use it with real FTP-Clients. That, and only that, is the use case for the frox ftp proxy.

If you want to use a web browser, you can simply use the HTTP-Proxy, which then also handles the FTP protocol

Since invoking ftp from windows command line basically runs a non gui ftp client, frox will handle those requests in transparent mode.

Regards
Bill.

Edit: I just tried ftp.astaro.com on command line with vista and windows7 and don't see any problems but I am on a newer version of astaro.

2010:11:07-23:02:38 gatekeeper frox[29864]: Connect from 192.168.0.222
2010:11:07-23:02:38 gatekeeper frox[29864]: ... to 80.237.192.99()
2010:11:07-23:03:15 gatekeeper frox[29864]: PORT: 207.***.***.***:48217
2010:11:07-23:03:24 gatekeeper frox[29864]: PORT: 207.***.***.***:44292
2010:11:07-23:03:34 gatekeeper frox[29864]: PORT: 207.***.***.***:43436
2010:11:07-23:03:39 gatekeeper frox[29864]: Server closed the control connection
2010:11:07-23:03:39 gatekeeper frox[29864]: Closing session
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data