Re: [squid-users] RV: squid

2017-06-15 Thread javier perez
Hi Alex, I totally understand it, and I know that active ftp is being deprecated, so It's logic that no further development It's gonna take place. I'm happy with Squid, and it works perfectly on 99% of my clients but two. Thank you for your time. Regards. On 06/15/2017 09:55 AM, Matus UHLAR -

Re: [squid-users] RV: squid

2017-06-15 Thread javier perez
Hello Eliezer, I have more tan 100 clients and only 2 of them demand active ftp, so only bcz of them we are rolling-back to Windows. Squid works perfectly with the other 100+ clients, so I am really happy with Squid, and I will use it in the future for sure. I can't redefine the thing bcz it depe

Re: [squid-users] RV: squid

2017-06-15 Thread javier perez
Hello Matus, You are right, the thing is that our clients are not going to open any other port than 20 and 21 for security meassures (or lazyness). So, if We can't use a dinamic data- port on the destination, passive ftp is discarded. The thing is that with the "ftp_passive off" directive the

Re: [squid-users] RV: squid

2017-06-15 Thread javier perez
Hi Anthony, My server acts as a focal point for all ftp transfer on a highly securized network. I have more tan 100 static routes pointing to different gateways deppending on our client addresses. The thing is that only 2 of our customers have old fashioned active-ftp sites, so only bcz of th

Re: [squid-users] RV: squid

2017-06-15 Thread Antony Stone
On Thursday 15 June 2017 16:22:44 javier perez wrote: > I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. Why? What are you trying to achieve by doing this, instead of simply allowing clients inside to connect to servers outside? Antony. -- I lay awake all night wond

Re: [squid-users] RV: squid

2017-06-15 Thread Alex Rousskov
On 06/15/2017 09:55 AM, Matus UHLAR - fantomas wrote: >> ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.5/squid-3.5.0.1-RELEASENOTES.html >> " Active and passive FTP support on the user-facing side; require passive >> connections to come from the control connection source IP address." > that mean

Re: [squid-users] RV: squid

2017-06-15 Thread Eliezer Croitoru
Hey, Can you re-define your scenario? Squid in it's basic form is merely a http proxy which you can use to fetch ftp requests. I do not know exactly what you expect but when you use squid as a FTP proxy it would convert the ftp connection into http. If you are using a specific ftp client it might

Re: [squid-users] RV: squid

2017-06-15 Thread Matus UHLAR - fantomas
On 15.06.17 19:58, javier perez wrote: I found this on the oficial documentation: ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.5/squid-3.5.0.1-RELEASENOTES.html Section 2.6 Relay FTP FTP Relay highlights: 2nd line: " Active and passive FTP support on the user-facing side; require passive co

Re: [squid-users] Office 365 Support for Squid Proxy

2017-06-15 Thread Eliezer Croitoru
Well I do not need to test it specifically since it's the most basic function of squid as forward proxy. It tunnels HTTPS connections as a TCP connection. Every instance of squid since 1.X did it in a very good way. There shouldn't be any issues since squid only allows or disallows the connection

Re: [squid-users] RV: squid

2017-06-15 Thread Antony Stone
On Thursday 15 June 2017 19:58:59 javier perez wrote: > I found this on the oficial documentation: > > ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.5/squid-3.5.0.1-RELEASENOTES > .html > > Section 2.6 Relay FTP > FTP Relay highlights: > 2nd line: > > " Active and passive FTP support on the u

Re: [squid-users] RV: squid

2017-06-15 Thread javier perez
I found this on the oficial documentation: ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.5/squid-3.5.0.1-RELEASENOTES.html Section 2.6 Relay FTP FTP Relay highlights: 2nd line: " Active and passive FTP support on the user-facing side; require passive connections to come from the control conne

Re: [squid-users] RV: squid

2017-06-15 Thread Matus UHLAR - fantomas
On Thursday 15 June 2017 16:22:44 javier perez wrote: I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. My configuration file looks like this: ...snip... acl SSL_ports port 443 21 On 15.06.17 13:03, Antony Stone wrote: Why are you specifying port 21 as SSL? appa

Re: [squid-users] Office 365 Support for Squid Proxy

2017-06-15 Thread Blason R
So it Would work for all Office 365 applications right? Have you tried that before? On Thu, Jun 15, 2017, 1:24 PM Eliezer Croitoru wrote: > In a simple forward proxy mode which enforces acl's it should be pretty > simple and easy to use. > > All The Bests, > Eliezer > > > http://ngtech.co.

Re: [squid-users] RV: squid

2017-06-15 Thread javier perez
>> I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. >> >> My configuration file looks like this: >...snip... snip? >> acl SSL_ports port 443 21 >Er, what? >Why are you specifying port 21 as SSL? I saw many guides that ask for it e.g. https://unix.stackexchange.com/qu

Re: [squid-users] RV: squid

2017-06-15 Thread Antony Stone
On Thursday 15 June 2017 16:22:44 javier perez wrote: > I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. > > My configuration file looks like this: ...snip... > acl SSL_ports port 443 21 Er, what? Why are you specifying port 21 as SSL? > ftp_passive off ...snip...

Re: [squid-users] Squid Transparent HTTP Proxy - 2 ETH Links - HTTP Proxy

2017-06-15 Thread Norbert Naveen
Hello Eliezer, Switch - Cisco 3750 Did not understand the " mirror all traffic to the probe node." Thanks Naveen -Original Message- From: Eliezer Croitoru [mailto:elie...@ngtech.co.il] Sent: Wednesday, June 14, 2017 7:28 PM To: norbert.nav...@tayana.in Cc: squid-users@lists.squid-cac

[squid-users] RV: squid

2017-06-15 Thread javier perez
Good morning squid users, I'm facing a weird situation in my Company. let me explain: I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. My configuration file looks like this: /etc/squid/squid.conf ###

Re: [squid-users] Office 365 Support for Squid Proxy

2017-06-15 Thread Eliezer Croitoru
In a simple forward proxy mode which enforces acl's it should be pretty simple and easy to use. All The Bests, Eliezer http://ngtech.co.il/lmgtfy/ Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il From: Blason R [mailto:blaso...@gmail.com] Sent: Thursday, Jun