Re: [squid-users] Setting Squid to allow active FTP connections

From: Shishir Saud <shishir@dont-contact.us>
Date: Mon, 25 Feb 2008 14:20:28 +0545

Kirtimaan wrote:
> Hello Shishir,
>
> I tried the command you mentioned below and it worked.
>
> Now I can access ftp in active mode. Can you provide some hint what
> ip_nat_ftp module exactly do ? I know its not squid related directly,
> but it might help me to understand how this kernel module allowed
> squid for active FTP connection.
>
> Thanks, Kirtimaan
>
> Shishir Saud wrote:
>> Kirtimaan wrote:
>>> Hello,
>>>
>>> Recently I installed the Squid Proxy server in our network on Fedora
>>> Core 7 linux box. Other windows system use this linux box as their
>>> Internet Gateway and DNS server. All traffic on port 80 on fedora
>>> system
>>> is forwarded to Squid port 3128.
>>>
>>> Our FTP server does not support passive connections. Now when we
>>> connect
>>> to our ftp server, ftp client fails to connect with message :
>>>
>>>> Entering Passive Mode
>>>> Illegal PORT command
>>>
>>> As a FTP client, Total Commander 7.02a is being used in our network.
>>>
>>> Is there any option in squid to use active connection instead of
>>> passive
>>> connection. In squid.conf file, I turned off ftp_passive option. So now
>>> setting looks as
>>>
>>>
>>> # TAG: ftp_passive
>>> # If your firewall does not allow Squid to use passive
>>> # connections, turn off this option.
>>> #
>>> #Default:
>>> # ftp_passive on
>>> ftp_passive off
>>>
>>> But still facing same problem.
>>>
>>> Thanks,
>>> Kirtimaan
>>>
>>>
>>>
>> |hi,
>> try with this command. Should work.
>>
>> #modprobe ip_nat_ftp|
>>
>>
>
>
>
Great.
By defaut, ip_nat_ftp modules are not installed in linux kernel. You
need to add implicitly.
For more you need to google.

-- 
 
              (o o)
 /------oOOO---(_)-----------\
 |            Regards        |
 |---------------------------|
 |          Shishir Saud     |
 \------------------oOOO-----/
             |--|--|
              || ||
             ooO Ooo
Received on Mon Feb 25 2008 - 01:35:51 MST

This archive was generated by hypermail pre-2.1.9 : Sat Mar 01 2008 - 12:00:05 MST