Re: [ilugd] ftp through proxy
anshul makkar wrote: i have configured proxy server through the use of squid. now when connect windows machine to do a ftp request to an outside domain through proxy , it gives an error snip I presume that you are doing natting on your proxy machine and ipforwarding is enabled. if ipforwarding is not enabled do echo 1 /proc/sys/net/ipv4/ip_forward For your ftp to work just insmod these iptable modules and try modprobe ip_conntrack_ftp modprobe ip_nat_ftp -- Regards, Mohan Cheema ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
Re: [ilugd] ftp through proxy
which nat rules will be useful to enable ftp through squid proxy . I have tried iptables -t nat -A POSTROUTING -o eth1 -p tcp --dport 21 -j MASQUERADE iptables -A INPUT --dport 21 -j ACCEPT iptables -t nat -A POSTROUTING -o eth1 -p tcp --sport 1000:6535 -j MASQUERADE if i give iptables -t nat -A POSTROUTING -j MASQUERADE , then clients in lan can connect to internet by bypassing squid. please help !! --- Mohan Cheema [EMAIL PROTECTED] wrote: anshul makkar wrote: i have configured proxy server through the use of squid. now when connect windows machine to do a ftp request to an outside domain through proxy , it gives an error snip I presume that you are doing natting on your proxy machine and ipforwarding is enabled. if ipforwarding is not enabled do echo 1 /proc/sys/net/ipv4/ip_forward For your ftp to work just insmod these iptable modules and try modprobe ip_conntrack_ftp modprobe ip_nat_ftp -- Regards, Mohan Cheema ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ __ Do you Yahoo!? Yahoo! Domains Claim yours for only $14.70/year http://smallbusiness.promotions.yahoo.com/offer ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
Fwd: Re: [ilugd] ftp through proxy
I am using Transparent proxy . in Smart ftp setting when I use proxy = http tunnel I get mesage of ports blocked Note: forwarded message attached. __ Do you Yahoo!? Yahoo! Domains Claim yours for only $14.70/year http://smallbusiness.promotions.yahoo.com/offer ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
RE: [ilugd] ftp through proxy
Use passive FTP from the ftp client. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of anshul makkar Sent: Wednesday, May 19, 2004 4:43 PM To: [EMAIL PROTECTED] Subject: [ilugd] ftp through proxy i have configured proxy server through the use of squid. now when connect windows machine to do a ftp request to an outside domain through proxy , it gives an error opening port 8196 http/1.0 403 forbidden If i enable this port 8196, then next time it gives some other port . what's the problem ? and how to solve it? __ Do you Yahoo!? SBC Yahoo! - Internet access at a great low price. http://promo.yahoo.com/sbc/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
RE: [ilugd] ftp through proxy
I am using smart ftp. Even though I am using passive ftp still the problem persists. In smart ftp setup I use http proxy tunnel as other types of proxy don't work. even i am not able to make out whether this is a problem of squid server or firewall setting. Please help --- Akshay Lamba [EMAIL PROTECTED] wrote: Use passive FTP from the ftp client. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of anshul makkar Sent: Wednesday, May 19, 2004 4:43 PM To: [EMAIL PROTECTED] Subject: [ilugd] ftp through proxy i have configured proxy server through the use of squid. now when connect windows machine to do a ftp request to an outside domain through proxy , it gives an error opening port 8196 http/1.0 403 forbidden If i enable this port 8196, then next time it gives some other port . what's the problem ? and how to solve it? __ Do you Yahoo!? SBC Yahoo! - Internet access at a great low price. http://promo.yahoo.com/sbc/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ __ Do you Yahoo!? Yahoo! Domains Claim yours for only $14.70/year http://smallbusiness.promotions.yahoo.com/offer ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
RE: [ilugd] ftp through proxy
Install frox on squid server and use passive ftp client. rgds On Thu, 2004-05-20 at 11:00, anshul makkar wrote: I am using smart ftp. Even though I am using passive ftp still the problem persists. In smart ftp setup I use http proxy tunnel as other types of proxy don't work. even i am not able to make out whether this is a problem of squid server or firewall setting. Please help --- Akshay Lamba [EMAIL PROTECTED] wrote: Use passive FTP from the ftp client. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of anshul makkar Sent: Wednesday, May 19, 2004 4:43 PM To: [EMAIL PROTECTED] Subject: [ilugd] ftp through proxy i have configured proxy server through the use of squid. now when connect windows machine to do a ftp request to an outside domain through proxy , it gives an error opening port 8196 http/1.0 403 forbidden If i enable this port 8196, then next time it gives some other port . what's the problem ? and how to solve it? __ Do you Yahoo!? SBC Yahoo! - Internet access at a great low price. http://promo.yahoo.com/sbc/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ __ Do you Yahoo!? Yahoo! Domains Claim yours for only $14.70/year http://smallbusiness.promotions.yahoo.com/offer ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/ ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
Re: [ilugd] ftp through proxy
On Wed, 2004-05-19 at 04:13 -0700, anshul makkar wrote: i have configured proxy server through the use of squid. now when connect windows machine to do a ftp request to an outside domain through proxy , it gives an error squid is a HTTP proxy and not FTP proxy. to proxy ftp requests, yu'll need to install either a ftp proxy (e.g. frox) or use NAT (preferably through iptables) opening port 8196 http/1.0 403 forbidden If i enable this port 8196, then next time it gives some other port . what's the problem ? and how to solve it? it seems as if incoming connections are now allowed to your machine. afaik, enabling INPUT connections for state ESTABLISHED and RELATED should solve the problem -- \|||/ (o o) ooO-(_)-Ooo- | vivek| GPG Key:| | [EMAIL PROTECTED]| http://exain.net/vike | || | Registered Linux User: #305493 | ( _ ) _| | | |_ (___| |___) ___ ilugd mailinglist -- [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[EMAIL PROTECTED]/
