Solved

FTP through proxy problems - Squid (centos)

Posted on 2014-09-12
8
2,630 Views
Last Modified: 2014-09-15
I am trying to work with a software vendor to set up software that uploads specific data via FTP to their facility.
This is coming from a satellite facility that connects through a proxy (Squid) located at our main location.
We have been troubleshooting in Filezilla to make the connection, but are not progressing well.
Below is the connection log in Filezilla.
The vendor has suggested that I add their IP address to Squid to allow two way communication.
Is this correct and if it is, how do I add it?
I am a novice at configuring Squid and I have spent time googling it, but I have not had much luck.
FileZilla log:

Status:            Connecting to 64.38.XXX.XX through proxy
Status:            Connecting to 11.30.XX.X:8080...
Status:            Connection with proxy established, performing handshake...
Response:      Proxy reply: HTTP/1.1 200 Connection established
Status:            Connection established, waiting for welcome message...
Response:      220 Microsoft FTP Service
Command:      USER zaesftpuser
Response:      331 Password required for zaesftpuser.
Command:      PASS ****
Response:      230 User logged in.
Command:      OPTS UFT8 ON
Response:      200 OPTS UTF8 command successful - UTF8 encoding now ON.
Status:            Connected
Status:            Retrieving directory listing...
Command:      PWD
Response:      257 "/" is current directory
Command:      TYPE I
Response:      200 Type set to I.
Command:      PASV
Response:      227 Entering Passive Mode (64,38.XXX.XXX.201,156)
Command:      LIST
Status:            Connecting to 11.30.XX.X:8080...
Status:            Connecting with proxy established, performing handshake...
Response:      150 Opening BINARY mode data connection.
Response:      Proxy reply: HTTP/1.1 403 Forbidden
Error:            Proxy handshake failed: ECONNRESET - Connection reset by peer
Error:            Connection timed out
Error:            Failed to retrieve directory listing

Any help would be appreciated.
Steve
0
Comment
Question by:RSchalhoub
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 15

Expert Comment

by:samri
ID: 40319362
I just ran a quick search, and havent tested this;

add the following in the squid.conf

acl SSL_ports port 443 21   # in my default squid.conf only port 443 is in.  just add 21
acl ftp proto FTP
http_access allow ftp


give it a shot.
0
 

Author Comment

by:RSchalhoub
ID: 40319400
Thank you for the reply.
i already have this in my Squid.conf

We probably have been looking in the same places.

Thanks,
Steve
0
 
LVL 19

Accepted Solution

by:
NickUpson earned 250 total points
ID: 40319480
when ftp starts passive mode, the data connection is shifted to a random port number, the firewall & proxy need to handle this
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 

Author Comment

by:RSchalhoub
ID: 40319553
NickUpson
Is there anyway I can know what these ports are and allow them in Squid?

When ftp'ing from the main facility there is no problem.  No proxy there so i think the firewall is ok.

Steve
0
 
LVL 19

Expert Comment

by:NickUpson
ID: 40319594
0
 
LVL 62

Assisted Solution

by:gheist
gheist earned 250 total points
ID: 40319809
You need to add all ports > 1024 to SSL ACL to allow FTP passive mode to work via HTTP CONNECT.
0
 

Author Comment

by:RSchalhoub
ID: 40319835
Should I add something like this to my squid.conf:

acl SSL_ports port 1024-65535
0
 
LVL 62

Expert Comment

by:gheist
ID: 40319850
21 1024-65535 443
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question