January 2000 - SUSE Proxy Suite - openSUSE Mailing Lists

Hello, I have a problem.. sort of.
by Hurley Braden 02 Feb '00

02 Feb '00

I have been pulling out what is left of my hair (not much) for the past week. My situation is: FTP1 eth0:1=IP1 | Internet -------------[ firewall ]----intranet eth0:2=IP2 | FTP2 I have to FTP servers that need to see the outside world... they are bound to IP1 and IP2. I have Suse 6.2 running on the box, with ipchains and ipmasqadm. I am also using ip aliases. Now my problems: I was running ftp-proxy for FTP1, and when two or more people tried to download a big file, it would just hang. This problem was solved by the Port patch from Letter 24 (by Volker?). THANKS !!!! My second problem is that if I try to run two ftp-proxys, people can't download anything. I know in the documentation it says not to run two proxies on the same port. Does that apply in this case? In the .conf files I list the different connecting address for the server. Hurley Braden

2 3

Outbound FTP
by Emmanuel.Granges＠swisscom.com 15 Jan '00

15 Jan '00

Hallo Allerseits Ist der FTP-Proxy in der Lage Masquerading selbst zu machen oder muss ich die Firewall so konfigurieren, dass bei outbound Traffic die Firewall alle Verbindungen an ensprechende Ports (21) umleitet, nachdem die Firewall selbst Masquerading (Ersatz der internen IP durch die Firewall-IP) bereits durchgeführt hat? Muss der FTP-Proxy den Server (Parameter "Listen") für Outbound-Verkehr auf dem internen Interface starten? Grüsse Emmanuel A. Granges > swisscom > x x y y y z > > Emmanuel A. Granges > Corporate Information & Technology > CT-ITA > Zentweg 27 > CH-3050 Bern > > Phone: +41 31 342 54 42 > E-mail: Emmanuel.Granges(a)swisscom.com >

2 1

can't get peername
by O. Matthaei 15 Jan '00

15 Jan '00

Hi there, first i want to say thanks for the FAST Help of my last posting. But i can´t say that´s all. When i start the ftp-proxy i get the following error message : ftp-proxy [3437] <01/10-17:33:19> TECH-ERR can't get peername for socket 0 and the ftp-proxy is death. The DestinationAddress is an virtual Adress ( only in the intranet ), but i think that´s not the problem. With best regards Olaf Matthaei -- GfI Gesellschaft für Information und Datenverarbeitung matthaei(a)narz.de Tel. : 0421/5762 115 Fax : 0421/5762 299

3 2

RE: [proxy-suite] Compile problem
by Lieurance, Cary 12 Jan '00

12 Jan '00

You can use --with-regex[=PATH] when you run configure or change the file ftp-cmds.c. I changed the file so that the area around line 375 looks like: /* ** Abort any previous service */ client_reinit(); /* ** Check for a RegEx constraint on the USER command */ cmds_set_allow(config_str(NULL, "ValidCommands", NULL)); for (cmd = cmdlist; cmd->name != NULL; cmd++) { if (strcasecmp("USER", cmd->name) != 0) continue; #if defined(HAVE_REGEX) if (cmd->regex == NULL) break; if ((p = cmds_reg_exec(cmd->regex, arg)) != NULL) { client_respond(501, NULL, "'USER': syntax error in arguments"); syslog_write(U_WRN, "bad arg '%.128s'%s for " "'USER' from %s: %s", arg, (strlen(arg) > 128) ? "..." : "", ctx->cli_ctrl->peer, p); return; } #endif break; } /* ** Check for permission and existence of "magic" ** destination address and port information */ The preprocessor directives may also work if the exclusion is larger but I have not tested it. > -----Original Message----- > From: Christophe Zwecker [SMTP:doc@zwecker.de] > Sent: Tuesday, January 11, 2000 7:59 PM > To: proxy-suite(a)suse.com > Subject: [proxy-suite] Compile problem > > Hi, > > I use: > > proxy-suite-1.7 > pgcc-2.95 19990728 on Mandrake 6.1 > > when I do make I get: > > gcc -g -O2 -c -I. -I.. -I../common ftp-cmds.c > ftp-cmds.c: In function `cmds_user': > ftp-cmds.c:374: structure has no member named `regex' > ftp-cmds.c:376: structure has no member named `regex' > ftp-cmds.c:376: warning: assignment makes pointer from integer without a > cast > make[1]: *** [ftp-cmds.o] Error 1 > make[1]: Leaving directory `/usr/src/proxy-suite-1.7/ftp-proxy' > make: *** [all] Error 1 > > any ideas ? > > thx alot ! > -- > Christophe Zwecker mail: doc(a)zwecker.de > Hamburg, Germany fon: +49 179 3994867 > > UNIX is user-friendly. It's just not ignorant-friendly and > idiot-friendly.Build a system even a fool can use,and only > a fool will want to use it.

1 0

Compile problem
by Christophe Zwecker 12 Jan '00

12 Jan '00

Hi, I use: proxy-suite-1.7 pgcc-2.95 19990728 on Mandrake 6.1 when I do make I get: gcc -g -O2 -c -I. -I.. -I../common ftp-cmds.c ftp-cmds.c: In function `cmds_user': ftp-cmds.c:374: structure has no member named `regex' ftp-cmds.c:376: structure has no member named `regex' ftp-cmds.c:376: warning: assignment makes pointer from integer without a cast make[1]: *** [ftp-cmds.o] Error 1 make[1]: Leaving directory `/usr/src/proxy-suite-1.7/ftp-proxy' make: *** [all] Error 1 any ideas ? thx alot ! -- Christophe Zwecker mail: doc(a)zwecker.de Hamburg, Germany fon: +49 179 3994867 UNIX is user-friendly. It's just not ignorant-friendly and idiot-friendly.Build a system even a fool can use,and only a fool will want to use it.

1 0

transparent proxy and ip-chains
by Selmeier Albin 10 Jan '00

10 Jan '00

Hi, can anyone tell me how to configure ftp-proxy as a transparent proxy on a box which is running IP-Chains? What do I have to do in order to get it running transparently and which ports must remain open when activating IP-Chains? Thanks in advance, Albin Selmeier

1 0

installing proxy-suite problems
by O. Matthaei 07 Jan '00

07 Jan '00

Hi there, first i`m using SuSe 6.2 and i would installing a ftp-proxy. At the moment i use Squid to use ftp from our intranet to the internet. Squid have the problem to write via ftp, so i hope the proxy-suite is the right Programm. Installing is now fine ( installing 1.7 ). Using the ./configure -- with-regex script and then make and last make install. And the proxy-suite is at the location /usr/local/proxy-suite , the man pages too. So when i want to read the man pages i see only a white page. An now the biggest Problem, who can i use the ftp-proxy. I saw a mail where anyone sayd i had to use a ftp-Server ??? At the moment i have in.ftp in the inetd.conf, is this the ftp-Server ??? And the next step ?? Who is the proxy-suite to configure to start with the inet Daemon ? Best regards Olaf Matthaei -- GfI Gesellschaft für Information und Datenverarbeitung matthaei(a)narz.de Tel. : 0421/5762 115 Fax : 0421/5762 299

2 1