December 2000 - SUSE Proxy Suite - openSUSE Mailing Lists

Proxy-suite 1.7tp5 on FreeBSD
by Carlos Alfonso Prieto Miranda 02 Jan '01

02 Jan '01

Hi ! Has anyone tryed to compile proxysuite 1.7 on FreeBSD? I'm trying and i got the messages: ::::::::::::: make 'all' in ./common "Makefile", line 84: Missing dependency operator "Makefile", line 85: Missing dependency operator "Makefile", line 86: Missing dependency operator "Makefile", line 87: Missing dependency operator "Makefile", line 88: Missing dependency operator make: fatal errors encountered -- cannot continue *** Error code 1 I think it´s a problem with a library. Thanks.

2 1

ftp proxy of an ftp proxy
by patrice.valentin＠chq.alstom.com 19 Dec '00

19 Dec '00

Hi, i have to create a two levels ftp proxy, the nearer from the ISP is the top level proxy, and i want that another proxy can send request to the top level, so my question is can ftp-proxy be a proxy of an another ftp-proxy ? Thanks in advance Patrice Valentin

2 1

Re: proxy of a proxy
by Marius Tomaschewski 14 Dec '00

14 Dec '00

On Thu, Dec 14, 2000 at 08:55:11AM -0800, Volker Wiegand wrote: > Hello, > > of course you do not disturb me! > > I do not know what you have to do for cascaded proxying, sorry. But since > they behave like a server to the client and like a client to the server, > it might be possible. I have not experimented with it, but would certainly > be interested in results if you should find out more. :-) Volker, you forgot the TransparentProxy feature. So the answer is yes, you can cascade the ftp-proxies using it as a transparent ftp-proxy on the gateways. The problem is, the ftp protocol doesn't support this, so you really need to install it on the gateways, because you have to redirect all outgoing requests to port 21 to the proxy. If you and your ISP has a Linux Box as a router/gateway in his net (of course, there may be other "non-Linux" gateways between the two Linux gateways), it is possible to do this. > On Thu, 14 Dec 2000 patrice.valentin(a)chq.alstom.com wrote: > > > > > > > Hi, i hope to not to disturb you, but i'm in trouble, i have to know if > > ftp-proxy ca be a proxy for another ftp-proxy, and if yes, have you already > > experiment it, and naturaly what is the parameter to forward the ftp > > requests to another proxy (i have to implement a local proxy behind > > a firewall, that forward the requests to a ftp-proxy at my ISP side) > > > > Thanks in advance (your ftp is great ;-) > > Patrice Valentin > > > > > > > > -- > Freundschaftlich / With kind regards > Volker > > -- > Volker Wiegand Voice: +1-510-628-3380 ext 5029 > SuSE Inc. Mobile (US): +1-510-333-9248 > 580 Second Street, Suite 210 (EU): +49-175-5427870 > Oakland, CA 94607 USA Fax: +1-510-628-3381 > http://www.suse.com/ E-Mail: wiegand(a)suse.com > > Kind regards, Marius Tomaschewski <mt(a)suse.de> -- SuSE GmbH, Hamburg --- SuSE Labs, Product Developement GPG/PGP public key see: http://www.suse.de/~mt/mt.pgp Key-FP: DF17 271A AD15 006A 5BB9 6C96 CA2F F3F7 373A 1CC0

1 0

Re: [proxy-suite] Caching
by Stephen Fletcher 07 Dec '00

07 Dec '00

Ken Squid does not support transparent ftp proxing, only transparent http. At least last time I looked and Hendrik did not seem to be keen on even contemplating adding such support. The reason I use the transparent patches is so no client configuration is necessary, and I wish it to stay that way :) Stephen On Wed, 6 Dec 2000, Kenneth L. Hamer wrote: > Stephen.Fletcher(a)nec.com.au wrote: > > > > How so? > > I am using the transparent patches and would like to have often downloaded > > files automatically cached, I dont want to have to tell users "use your > > browser if you want caching". Is this what you are suggesting? I know > > there are som ftp proxies around that use caching. Would someone know one > > that I could mash into ftp-proxy and not be a problem wuith licensing? > > Okay, first I'll say that I don't have implementation details, this is > just something that *should* work. Although I'm not familiar with the > transparent patches tp FTP proxy - we don't use it that way. > > No, I'm not suggesting to tell them to use their browser. What I was > thinking is that you could put squid in between them and the FTP proxy. > Have the connect through squid (either by transparent proxying or > explicit proxy configuration. Then configure squid to go out through > the SUSE FTP proxy. Again, that could be done either through explicit > configuration or through another round of transparent proxying. Squid > should work with pretty much any FTP client. > > I'll admit you might have to work some magic with ipchains to make this > work on a single machine. > > - Ken > Stephen Fletcher NEC Australia Phone: (02) 6250 8718 Fax: (02) 6250 8775

1 0

Configuring the FTP Proxy
by Jason.Wong＠tnt.com 06 Dec '00

06 Dec '00

Hi Guys, I wish to setup a FTP gateway on my firewall machine, to prevent direct connection from internal hosts to the outside world - and no inbound connection are allowed. I realised I will have problem with ftp-data, as it will start a connection from the server back to my client. How to configure ftp-proxy to fit my requirements? And how does it affect my users? My Linux machine is RH 6.2 + 2.2.17. Thanks. Regards, Jason ~#~

2 1

Caching
by Stephen Fletcher 06 Dec '00

06 Dec '00

Hi I was wondering if anyone had already gone to the trouble of patching the ftp proxy to cache select files at all? Thanks Stephen Stephen Fletcher NEC Australia Phone: (02) 6250 8718 Fax: (02) 6250 8775

2 1

non-anonymous ftp with browsers
by Steeman Philip 02 Dec '00

02 Dec '00

Hello, am I doing something wrong? I've installed ftp-proxy at my masquerading linux machine to get a ftp-connection from outside to inside. Everything works fine with a 'real' ftp client. Everything works file with a browser (IE5.0 / netscape4.7) as long as it is anonymous ftp. With non-anonymous ftp (ftp://user@hostname) I can see all the files and all the maps, but when I try to receive a file, I get the following error in the browser: The following error was encountered: ERROR 432 -- The URL you requested could not be fetched. This means that: Can't open data connection. When I look in the log-file is see the folowing error: ftp-child [6315] <12/02-10:44:52> USER-INF 'TYPE I' from 213.224.83.166 ftp-child [6315] <12/02-10:44:52> USER-INF 'MDTM home/inform/steeman/TEKSTEN/qos .nu_en_toekomst~' from 213.224.83.166 ftp-child [6315] <12/02-10:44:53> USER-INF 'SIZE home/inform/steeman/TEKSTEN/qos .nu_en_toekomst~' from 213.224.83.166 ftp-child [6315] <12/02-10:44:53> USER-INF 'RETR home/inform/steeman/TEKSTEN/qos .nu_en_toekomst~' from 213.224.83.166 ftp-child [6315] <12/02-10:44:53> TECH-INF 'PORT 10.1.14.1:2703' for 213.224.83.166 ftp-child [6315] <12/02-10:44:53> TECH-ERR can't connect Cli-Data for 213.224.83.166 My configfile looks looks like: [-Global-] DestinationAddress 10.1.14.2 Listen 193.121.139.1 LogDestination /var/log/ftp-proxy.log PortResetsPasv no ServerType standalone Can somebody help me? Thanks, Philip

1 0

Archive
by Helvio Candido Jr. 01 Dec '00

01 Dec '00

I'd like to know if I can use ftp enabled browsers (like Netscape or IE) and use the AllowMagicUser feature to connect to other ftp servers. As far as I know (though it may be not so far), the browsers won't accept "URLs" like "ftp://anonymous@ftp.domain.com@ftp-proxy.server", as it would try to connect to the ftp.domain.com(a)ftp-proxy.server instead of ftp-proxy.server. I tried quotes or "%40", but, as expected, it didn't work out. Maybe we could change the separators characteres (i.e. # instead of @ and % instead of :, so we could try "ftp://anonymous#ftp.domain.com%30@ftp-proxy.server" and connect to the ftp.domain.com server, on port 30, using the user anonymous!). If there is a different way to do that, please, let me know. Helvio Candido Jr. helvio(a)multiconecta.com.br

2 1