Using FTP through Squid - how?

[MikeBronner]

I would like to use FTP on my networked computers that use my linuxbox as an internet gateway. Linux is running Squid 2.2 (came with SuSE 7.0).
I am able to browse the net, but when I try to use FTP programs (like Dreamweaver, WS_FTP, etc.) it won't connect.

Are there any settings I need to enable in Squid, or how can I get FTP to work?

Thanks guys! Take Care,
Mike

 

[ifincham]

Hi,

As far as I know its not possible - squid only talks http to clients although it supports ftp at the server end. So you can enter a ftp url in a browser but you can't use a 'pure' ftp client. You could try uncommenting 'ftp_passive on' in /etc/squid/squid.conf to see if it makes a difference (depends on what clients send).

Regards

 

[MikeBronner]

Thanks!

I think that might do the trick. I'll try it as soon as I get home.

Are there other proxy servers available that will let me configure various ports besides the http port? I'm fairly new to Linux, so please bear with me.

Can I run Socks on Linux in tandem with squid, in order to open additional ports (like ftp, udp, etc...)

Thanks again! Take Care,
Mike

 

[bkchandrashekar]

In squid only works with internet browser

It is better to implment ipchains options by forwarding the ipaddress for server you can ping , FTP , Browse ,TELNET ,etc..
YOu can go through the man pages ipchains to implment ..

bye,
b.k.chandra shekar

 

[ifincham]

Hi,

Unless you want the cache or other proxy features of squid (e.g. acl to control usage by time of day, etc.), to share an internet connex on a linux box it's by far the easiest to employ ip masquerading (a form of network address translation). With Suse 7.0 you'd have ipchains for packet filtering so you just need a few lines of ipchains commands like this:


echo 1 > /proc/sys/net/ipv4/ip_forward
ipchains -F forward
ipchains -P forward REJECT
ipchains -A -i eth1 -s 172.16.16.0/24 -j MASQ

The effect of this is to masquerade all tcp/udp/icmp traffic originating on the lan (example ip address range 172.16.16.0/24) out of the 'eth1' interface, i.e. the external internet interface. You can make it much more restrictive if you like as ipchains is the firewalling code. To effect these commands just add to your existing firewall code if you have any, otherwise just put them in the Suse local customisation script, i.e.,

/sbin/init.d/boot.local

Regards