We have a new Sophos UTM 9 Cluster at work but Filezilla failed to connect to any FTP server using the FTP proxy.
I tried with Cute FTP and Core FTP and it work fine.
UTM version : 9.107-33
FTP Proxy in NON-Transparent Mode with dual AV and without exeptions and restriction
Here is the FTP Proxy log while using Filezilla:
2013:12:23-11:19:08 UTM425-M-1 frox[26681]: Closing session
2013:12:23-11:19:48 UTM425-M-1 frox[29054]: Connect from computer_IP
2013:12:23-11:19:48 UTM425-M-1 frox[29054]: ... to proxy_IP()
2013:12:23-11:19:48 UTM425-M-1 frox[29055]: Connect from proxy_IP(UTM425-M)
2013:12:23-11:19:48 UTM425-M-1 frox[29055]: ... to proxy_IP()
2013:12:23-11:19:48 UTM425-M-1 frox[29056]: Connect from proxy_IP(UTM425-M)
2013:12:23-11:19:48 UTM425-M-1 frox[29056]: ... to proxy_IP()
2013:12:23-11:19:48 UTM425-M-1 frox[29057]: Connect from proxy_IP(UTM425-M)
2013:12:23-11:19:48 UTM425-M-1 frox[29057]: ... to proxy_IP()
2013:12:23-11:19:48 UTM425-M-1 frox[29058]: Connect from proxy_IP(UTM425-M)
2013:12:23-11:19:48 UTM425-M-1 frox[29058]: ... to proxy_IP()
2013:12:23-11:19:48 UTM425-M-1 frox[29059]: Connect from 172.16.244.208(UTM425-M)
2013:12:23-11:19:48 UTM425-M-1 frox[29059]: ... to proxy_IP()
2013:12:23-11:19:48 UTM425-M-1 frox[5069]: Connect from proxy_IP refused: too many connections from that host
2013:12:23-11:19:48 UTM425-M-1 frox[29059]: Server flooding the control connection
2013:12:23-11:19:48 UTM425-M-1 frox[29059]: Closing session
2013:12:23-11:19:48 UTM425-M-1 frox[29058]: Server flooding the control connection
2013:12:23-11:19:48 UTM425-M-1 frox[29058]: Closing session
2013:12:23-11:19:48 UTM425-M-1 frox[29057]: Server flooding the control connection
2013:12:23-11:19:48 UTM425-M-1 frox[29057]: Closing session
2013:12:23-11:19:48 UTM425-M-1 frox[29056]: Server flooding the control connection
2013:12:23-11:19:48 UTM425-M-1 frox[29056]: Closing session
2013:12:23-11:19:48 UTM425-M-1 frox[29055]: Server flooding the control connection
2013:12:23-11:19:48 UTM425-M-1 frox[29055]: Closing session
2013:12:23-11:19:48 UTM425-M-1 frox[29054]: Server flooding the control connection
2013:12:23-11:19:48 UTM425-M-1 frox[29054]: Closing session
It does a very strange LOOP...
And with Cute FTP :
2013:12:23-11:21:38 UTM425-M-1 frox[29135]: Connect from 172.16.245.23
2013:12:23-11:21:38 UTM425-M-1 frox[29135]: ... to 213.186.33.209(ftp.1000gp.ovh.net)
2013:12:23-11:21:39 UTM425-M-1 frox[29135]: PASV: 213.186.33.209:32401
Both FTP Client are setup to use the FTP Proxy as user@host[:P]ort
The only difference is that Filezilla doesn't have a separate input box for the port so i added it in the host field and we see that it well connect to the proxy:
Utilisation du Proxy proxy_IP:2121
Statut : Connexion à proxy_IP:2121...
Statut : Connexion établie, attente du message d'accueil...
Réponse : 220 Frox transparent ftp proxy. Login with username[@host[[:P]ort]]
Commande : USER domain\user
Erreur : Impossible de lire depuis le socket : ECONNRESET - Connection reset by peer
Erreur : Impossible d'établir une connexion au serveur
If anyone can help...
We have a few users using Filezilla and doesn't to tell them to use Core FTP instead.
Regards,
Nicolas
This thread was automatically locked due to age.
