December 2001 - SUSE Proxy Suite - openSUSE Mailing Lists

is ftp-proxy a possible solution for me?
by Gerhard Kahl 26 Dec '01

26 Dec '01

Hi, I have a small home network with a linux server. A squid proxy server on the linux box provides web access for the other machines on the home-network. No ip-forwarding is done on the linux-server. There is also a windows machine in the home network on which I do some web-develpment. Now I would like to use the ftp upload feature of my web-development tools to upload some projects to the internet. My question is, can proxy-suite ftp-proxy be used to provide ftp upload possibility for the windows machine on my home network? If the answer is yes, should I run ftp-proxy from inetd or as standalone? Thanks in advance. Gerhard --

1 0

snapshoot 1.7.9pre3
by Marius Tomaschewski 22 Dec '01

22 Dec '01

Hi! *** This version 1.7.9pre3 is purposed for testing only. *** This snapshoot may work fine, but containts a lot of not well documented (except of the lines bellow) and tested changes. Please be patient, a reguar release will follow... - transparent proxying should be full-functional for ipchains, iptables and BSD ipnat. - build-in chroot and UID/GID dropping works fine; it is done also in inetd mode directly after the initialization - also the daemon runs with dropped privileges (port 20 will not be used if not UID 0). - log files are created with dropped UID/GID inside of the chroot (because of log rotation) - make sure, the proxy log directory is writeable and old log files are owned by the User from config file - netscape should be able to access a directory via symlink You can find it in: ftp://ftp.suse.com/pub/projects/proxy-suite/src/snapshoots/ e25aeea247bcb8df8434ac1c8b996752 src/snapshoots/proxy-suite-1.7.9pre3.tar.bz2 4c8e503937d73355e182de9fb4efb2ee src/snapshoots/proxy-suite-1.7.9pre3.README1st Bye, Marius. -- ° --- Marius Tomaschewski <mat(a)mt-home.net>, Germany --- ° The number of UNIX installations has grown to 10, with more expected. - The Unix Programmer's Manual, 2nd Edition, June 1972

1 0

Latest Code SnapShot
by Robert Rottscholl 20 Dec '01

20 Dec '01

Hi, could somebody of the developer's send me the latest code snapshot? I already have 1.7.tp9pre1 and I'm very intrested in it because ist offer's implementation for linux 2.4. The 9pre1 doesn't compile on my system, so I hope if I get a new one I could install it. Ciao ;-) Robert - DE

2 1

Antwort: AW: [proxy-suite] transparent proxy with kernel 2.4.10
by K.Kortenhorn＠nordakademie.de 17 Dec '01

17 Dec '01

OK OK ! I have deleted /etc/proxy-suite/ftp-deny.txt NO more error message like ftp-child[14071]: USER-ERR reject: '172.17.1.253' (DenyMessage) But now this error message ftp-child[14074]: USER-INF connect from 172.17.1.253 ftp-child[14074]: TECH-ERR can't chroot to '/var/ftp-proxy/rundir' (errno=1 [Operation not permitted]) Mit freundlichem Gruß aus Elmshorn Karsten Kortenhorn

1 0

AW: [proxy-suite] transparent proxy with kernel 2.4.10
by Grefe, Ralf 17 Dec '01

17 Dec '01

Hello Karsten, I had this error because of missing rights for some text messages. But this didn´t depend on the configuration of a transparent proxy. kind regards Ralf -----Ursprüngliche Nachricht----- Von: K.Kortenhorn(a)nordakademie.de [mailto:K.Kortenhorn@nordakademie.de] Gesendet: Montag, 17. Dezember 2001 16:15 An: proxy-suite(a)suse.com Betreff: [proxy-suite] transparent proxy with kernel 2.4.10 Hi , i want to use the ftp-proxy for outbound ftp. For all users ftp shoud work transparent. When i tryed to connect ftp://ftp.suse.com, i got this messages from the server: ftp-child[13812]: USER-ERR reject: '172.16.2.171' (DenyMessage) Why ? Mit freundlichem Gruß aus Elmshorn Karsten Kortenhorn --------------------------------------------------------------------- To unsubscribe, e-mail: proxy-suite-unsubscribe(a)suse.com For additional commands, e-mail: proxy-suite-help(a)suse.com

1 0

transparent proxy with kernel 2.4.10
by K.Kortenhorn＠nordakademie.de 17 Dec '01

17 Dec '01

Hi , i want to use the ftp-proxy for outbound ftp. For all users ftp shoud work transparent. When i tryed to connect ftp://ftp.suse.com, i got this messages from the server: ftp-child[13812]: USER-ERR reject: '172.16.2.171' (DenyMessage) Why ? Mit freundlichem Gruß aus Elmshorn Karsten Kortenhorn

1 0

AW: [proxy-suite] second simultaneous ftp-session to same ftp-ser ver
by Grefe, Ralf 14 Dec '01

14 Dec '01

Hello Marius, Hello Robert, at first thanks for your quick response! And here are screenshots from logs and associated ftp-sessions (I´ve substituted the first three IP-parts by testdomain): ##################################################################### [root@viruswall /root]# ftp testdomain.5 Connected to testdomain.5. 220 proxy FTP server (Version 1.7 - 1999/10/22 09:22:47) ready. Name (testdomain.5:root): anonymous(a)ftp.suse.com 331 Guest login ok, send your complete e-mail address as password. Password: 230 Guest login ok, access restrictions apply. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for /bin/ls. total 40 drwxr-xr-x 10 root root 4096 Jan 11 2001 . drwxr-xr-x 10 root root 4096 Jan 11 2001 .. ...... 226 Transfer complete. ######################################################################### login as: root Sent username "root" root(a)testdomain.6's password: Last login: Fri Dec 14 10:37:32 from 62.157.189.58 [root@viruswall /root]# ftp testdomain.5 Connected to testdomain.5. 220 proxy FTP server (Version 1.7 - 1999/10/22 09:22:47) ready. Name (testdomain.5:root): anonymous(a)ftp.suse.com 421 Service not available, remote server has closed connection Login failed. ######################################################################### cat *log* -i [28922] <12/14-10:41:38> USER-INF connect from testdomain.6 -i [28922] <12/14-10:41:48> USER-INF 'USER anonymous' dest 202.58.118.12:21 from testdomain.6 -i [28922] <12/14-10:41:48> USER-INF reading data for 'anonymous' from cfg-file -i [28922] <12/14-10:42:11> USER-INF 'PASS XXXX' from testdomain.6 -i [28922] <12/14-10:42:12> USER-INF 'SYST' from testdomain.6 -i [28922] <12/14-10:43:18> USER-INF 'PORT testdomain.6:3083' from testdomain.6 -i [28922] <12/14-10:43:18> USER-INF 'LIST' from testdomain.6 -i [28922] <12/14-10:43:19> TECH-INF 'LIST' sent for testdomain.6 -i [28922] <12/14-10:43:21> USER-INF Transfer for testdomain.6: LIST '' 2 sec -i [28922] <12/14-10:45:20> TECH-WRN server closed connection for testdomain.6 -i [28923] <12/14-10:42:14> USER-INF connect from testdomain.6 -i [28923] <12/14-10:42:26> USER-INF 'USER anonymous' dest 202.58.118.12:21 from testdomain.6 -i [28923] <12/14-10:42:26> USER-INF reading data for 'anonymous' from cfg-file -i [28923] <12/14-10:42:26> TECH-ERR can't connect 202.58.118.12:21 for testdomain.6 -----Ursprüngliche Nachricht----- Von: Marius Tomaschewski [mailto:mat@mt-home.net] Gesendet: Donnerstag, 13. Dezember 2001 23:55 An: Grefe, Ralf Betreff: Re: [proxy-suite] second simultaneous ftp-session to same ftp-server >I don't know anything about any limitation for 1 session per IP >on ftp.suse.com as Robert suggested. I've explicitely tested this >again with ftp.suse.com and it works fine with more than one >simultan sessions and also data transfers. >There may be a error (reject) message in the (syslog-)messages; >can you send it to the list (only few applicable lines, please) ? >Bye, > Marius. -----Ursprüngliche Nachricht----- Von: Robert Rottscholl [mailto:lv426@web.de] Gesendet: Donnerstag, 13. Dezember 2001 21:55 An: proxy-suite(a)suse.com Betreff: Re: [proxy-suite] second simultaneous ftp-session to same ftp-server >Hi Ralf, >it could be possible that you aren't allowed to open a second connection >to the ftp server because the server would answer that you're already >logged in? >Ciao Robert ;-)

1 0

second simultaneous ftp-session to same ftp-server
by Grefe, Ralf 13 Dec '01

13 Dec '01

Hello, I´ve just configured the proxy-ftp-suite and I did it for the first time. I hope this is an available excuse for the following question. The proxy server works and I can use some ftp connections at the same time, but I can´t open a second simultaneous ftp-session to same ftp-server for example ftp.suse.com. I started the proxy suite via inetd and configured passive ftp. The remote system rejects the second connection, if I use the proxy suite. Otherwise it works simultaneously. Because I´m using passive ftp, it couldn´t be a port problem (- I believe ;-) Thanks in advance for any hint! Ralf Grefe

2 1

Using ftp-proxy, user authorisation not wanted
by C. Koth 06 Dec '01

06 Dec '01

Hi! Server: SuSE Linux 7.3 with ftp-proxy (1.7tp7) from the proxy-suite Client: LeechFTP on Windows98 both are connected via LAN, the Server has a dial up connection with ISDN I want to connect with the FTP-client to an external FTP-server with login. I have entered the internal IP of my linux server which runs the ftp-proxy in the configuration setup of the client. Also I tried other clients with the same setup and result. The configuration of the ftp-proxy is nearly left by default. I only uncommented: DestinationAddress ftp.suse.de LogDestination /var/log/ftp-proxy.log ServerType standalone The ftp-proxy is running. The Problem is always the same: When I try to connect the client with the external ftp-server I am ask to enter username and password for the firewall. I can enter what ever I want, no access is possible. I dont want to have user authentication on the proxy. Does anyone knows how to switch this of? Or do I have another problem? In the ftp-proxy.log file I have found following message: ftp-child [4756] <12/06-16:19:26> USER-INF connect from (MY_CLIENT_IP) ftp-child [4756] <12/06-16:19:27> USER-WRN USER without name from (MY_CLIENT_IP) When I choose user@site in the client configuration I have this in my logfile: ftp-child [4757] <12/06-16:28:44> USER-INF connect from (MY_CLIENT_IP) ftp-child [4757] <12/06-16:28:44> USER-INF USER USERNAME@EXT_FTP_SERVER_IP from (MY_CLIENT_IP) ftp-child [4757] <12/06-16:28:44> USER-INF reading data for username@EXT_FTP_SERVER_IP from cfg-file Thanks for any help Christian

1 0

ftp-proxy file resume funktioniert nicht
by Heinz Becker 04 Dec '01

04 Dec '01

client: windows 2k flashfxp und ncftp proxy: suse linux 7.0 fwproxy-1.7tp7-2 server: suse linux 7.0 ncftpd 2.7.0 hallo, der ftp-proxy funktioniert. es gibt jedoch probleme beim file resume via REST befehl. beispiel: file (10MB) 1) upload via proxy auf den server 2MB, abbruch durch benutzer 2) auf dem ftp server liegt nun die datei, grösse 2MB erneutes verbinden via proxy, resume (REST 2MB / STOR) client+server melden beide 8MB erfolgreich übertragen. 3) eigentlich sollte das file jetzt auf dem ftp-server sein. dort liegen aber nur die zuletzt hochgeladenen 8MB. das interessante: weder im ftp-proxy log noch im ftp-server log sind fehler zu entdecken. der ftp server empfängt das REST mit dem STOR kommando und führt dieses auch fehlerfrei aus, zumindest was den log betrifft. selbstverständlich funktioniert obiges unter umgehung der proxy servers problemlos ;) desweiteren werden dateien ohne resume fehlerfrei via proxy übertragen. strange, isn't ? für hilfe wäre ich sehr dankbar! __________________________________________________________________ Nokia 5510. Verrücktes Design! Toller Sound! Entdecke und gewinne es auf http://de.promotions.yahoo.com/nokia/ Gewinnspiel endet am 16. Dezember 2001.

2 1