November 1999 - SUSE Proxy Suite - openSUSE Mailing Lists

Re: [proxy-suite] Login nicht moeglich
by Mike Klinkert 29 Nov '99

29 Nov '99

On Sat, 27 Nov 1999, Craig St George wrote: > >Hi I m also using it for outbound only with diald and have complied it to > >run on port 1021 and have windows boxes connecting over the local network > >to it. Did you modify the source for outbound only? Or are there firewall rules to make sure connections to port 1021 cannot be made from the Internet? > When they call an outside site it brings up diald and away it goes. > There are a few problems some times it seems to block but appart form that > it is fine The logfiles seem to indicate that the proxy _does_ get the return of the LIST, but the client never receives it. This is not always the case. Sometimes LIST works, sometimes it doesn't. I've yet got to find the common denominator. > so now I have Squid and FTP proxy on the unix box sendmail and fetchmail > which gives the local users > most features they need and I don't have to run IP masquerade That's the way to do it indeed! The nice thing of the outbound proxy is that you can connect to non regular ports on the Internet, whereas with IP masquerading each port has to be specified. BTW, does anybody know if multiple logging methods can be used? At the moment I'am using syslog, which forwards all messages to the host I'm on, so I can monitor it. However, I also would like the messages to be logged to a separate file (on the router) for obvious reasons... -- Mike Klinkert <michael(a)nomennescio.net> Public PGP-key: http://www.nomennescio.net/~michael/pgpkey

2 1

Re: [proxy-suite] Login nicht moeglich
by Craig St George 29 Nov '99

29 Nov '99

>Hi I m also using it for outbound only with diald and have complied it to >run on port 1021 and have windows boxes connecting over the local network >to it. When they call an outside site it brings up diald and away it goes. There are a few problems some times it seems to block but appart form that it is fine so now I have Squid and FTP proxy on the unix box sendmail and fetchmail which gives the local users most features they need and I don't have to run IP masquerade >Using it as an outbound proxy introduces some problems though (LISTings are >not always returned to the client and PASSIVE mode does not seem to work >correctly). When I've got some spare time I try to investigate what's wrong. > >BTW, I think it would be nice if the FTP proxy can also be configured as an >outbound proxy _only_. It can then listen on a non regular port where users on >the intranet can connect to reach FTP servers on the Internet. This can be >done >by adding packet filter rules, but that's not the way to do it. > >Greetings, > >-- >Mike Klinkert <michael(a)nomennescio.net> > >Public PGP-key: http://www.nomennescio.net/~michael/pgpkey

2 1

Login nicht moeglich
by Frank Baschin 29 Nov '99

29 Nov '99

Hallo, ich habe die aktuelle FTP Proxy Suite. Compiliert und installiert. Wenn ich den FTP-Server als eigenen Prozess starte und mich versuche einzuloggen kommt dies: ------------------------- frank@meggy:> frank@meggy:>ftp localhost Connected to localhost. 220-Hello to my SuSE Proxy-FTP Suite 1.7 220- 220 meggy.allcon.net FTP server (Version 1.7 - 1999/10/22 09:22:47) ready. Name (localhost:frank): frank 421 Service not available, remote server has closed connection Login failed. No control connection for command: No such file or directory ftp> by frank@meggy:> -------------------------- Der Server an sich läuft also, nur einloggen kann ich mich nicht. In der Doku habe ich dazu nichts gefunden. Den vorhandenen WuFTP (der funktioniert) habe ich aus dem inet Dämon herausgenommen. Wenn ich den Proxy-FTP übrigens über den inet-Dämon laufen lasse, dann kann ich obige Prozedur nur einmal machen. Beim zweiten Versuch "ftp localhost" kommt nur noch ein "connection refuses" und ich muß den inet-Dämon neu starten um die Login Meldung zu bekommen. Kann mir dabei jemand helfen? gruß frank

3 3

Antwort: [proxy-suite] Login nicht moeglich
by w.joost＠mail.dak.de 26 Nov '99

26 Nov '99

Hallo Frank, Leider sind da noch einige Fehler im Proxy, die Entwickler scheinen nicht so ausführlich getestet zu haben. Ich hatte hier für alle Verbindungen Port-Ranges angegeben und hatte das Phänomen, daß nur a) ein einzelner User den Proxy nutzen kann b) nur eine einzige Datenverbindung möglich war. Ein Fehler ist, daß die Routine, mit der ein freier Port gesucht wird nicht funktionieren kann, wenn man mit setsockopt das Address-Reuseable-Feature einschaltet. Müssen aber irgendwo noch weitere Käfer krabbeln. Ich habe zum Server hin nur den aktiven Modus zum laufen bekommen und hatte auch dort nicht reproduzierbar Probleme: Der im Port-Kommando übermittelte Port stand auf dem Proxy-Rechner nicht auf Listen. Außerdem bricht bei mehreren ftp-Verbindungen auch die erste Verbindung ab, wenn man die 2. schließt. Ergo: Entweder auf eine korrigierte Version warten oder aber mal auf www.fwtk.org gucken. Gruß Wolfram.

3 3

Compile issues
by Michael Anthon 16 Nov '99

16 Nov '99

Greetings, I have just grabbed the proxy suite package (1.7) since I need to proxy my internal FTP serve to the outside world and this seems like just the ticket. I am, however, having a little trouble compiling it. I ran the usual ./configure and make and I get this error.... ::::::::::::: make 'all' in ./ftp-proxy make[1]: Entering directory `/usr/src/proxy-suite-1.7/ftp-proxy' gcc -g -O2 -c -I. -I.. -I../common ftp-cmds.c ftp-cmds.c: In function `cmds_user': ftp-cmds.c:374: structure has no member named `regex' ftp-cmds.c:376: structure has no member named `regex' ftp-cmds.c:376: warning: assignment makes pointer from integer without a cast make[1]: *** [ftp-cmds.o] Error 1 make[1]: Leaving directory `/usr/src/proxy-suite-1.7/ftp-proxy' make: *** [all] Error 1 I'm wondering if this is something missing from my system or if it is a problem with the configure. I don't want the regex stuff (or do I?) so left that bit out and configure reported it would not use the regex. I am going to try grabbing the regex libraries and try again. Cheers Michael Anthon

3 2