Mailinglist Archive: proxy-suite (11 mails)

[Marius Tomaschewski <mt@xxxxxxx>]

On Thu, Nov 30, 2000 at 02:52:03PM -0200, Helvio Candido Jr. wrote:
> I'd like to know if I can use ftp enabled browsers (like Netscape or IE)
> and use the AllowMagicUser feature to connect to other ftp servers.

Browsers are not my(/our) primary clients. There is SQUID for stuff
like this.

> As far as I know (though it may be not so far), the browsers won't
> accept "URLs" like "ftp://anonymous@xxxxxxxxxxxxxx@ftp-proxy.server";, as
> it would try to connect to the ftp.domain.com@xxxxxxxxxxxxxxxx instead
> of ftp-proxy.server. I tried quotes or "%40", but, as expected, it
> didn't work out.
> 
> Maybe we could change the separators characteres (i.e. # instead of @
> and % instead of :, so we could try
> "ftp://anonymous#ftp.domain.com%30@xxxxxxxxxxxxxxxx"; and connect to the
> ftp.domain.com server, on port 30, using the user anonymous!).

The transparent proxy version 1.7tp5 on
      ftp://ftp.suse.com/pub/projects/proxy-suite/
implements a UseMagicChar-command to replace the @ character,
i.e.:

UseMagicChar  %

You can use ftp://anonymous%ftp.domain.com@xxxxxxxxxxxxxxxx/
with.

I'll put the Port-Char (UseMagicPortChar) on my TODO...

> If there is a different way to do that, please, let me know.

You can redirect (ipchains) all requests to ftp.domain.com:30 on
the proxy (it has also to be your gateway) to a port the proxy
listens on and allow transparent proxying:

ipchains -A input -s $local_net -d ftp.domain.com 30 -p tcp -j REDIRECT 21

The proxy uses the ip and port, so you simply use the normal a URL:

ftp://anonymous@xxxxxxxxxxxxxx/

But you need a redirections for all ftp-servers using a different
port than 21 (I do not understand why they use different ports?!).

Kind regards,
 Marius Tomaschewski <mt@xxxxxxx>
--
 SuSE GmbH, Hamburg   ---   SuSE Labs, Product Developement
 GPG/PGP public key see:      http://www.suse.de/~mt/mt.pgp
 Key-FP: DF17 271A AD15 006A 5BB9  6C96 CA2F F3F7 373A 1CC0