Frox Proxy having intermittent problem

[rajesh.bahl]

Dear All,

Need your help in resolving the issue:-


WE are using squid as proxy server. Some of our clients need ftp access to ftp servers on the internet. I tried  a lot of "googling" and scratching head on the "available" solutions but nothing worked .

Ultimately I came across a software called FROX ftp proxy which is supposed to act as ftp proxy server.
I installed the same but it seems that there is some issue with this one also as:

1. I can ftp any ftp server on the internet from any client if and only if the same has been connected through ftp protocol  initially from the machine running FROX proxy.
2. If the same is not done , no client can connect the ftp servers.

My frox.conf is as under:-

Port 2121
BindToDevice eth1
ResolvLoadHack wontresolve.doesntexist.abc
User frox
Group frox
WorkingDir /var/lib/frox
DontChroot Yes
LogFile /var/log/frox/frox.log
XferLogging yes
PidFile /var/run/frox/frox.pid
APConv yes
BounceDefend yes
ControlPorts 40000-40999
PassivePorts 41000-41999
MaxForks 10
MaxForksPerHost 4
ACL Allow 192.168.0.0/255.255.255.0 - * 21



Can some one help in resolving the issue ?

regards
rajesh.bahl

[Ricky]

I do not have experience about this one but I remember, I was able to use ftp through squid by configuring FTP client to use http proxy and suggesting squid to use FTP in passive mode always.

Also make sure that ftp "proto" is enabled in squid.

I have access to squid setup these days otherwise would have verified myself.

[rajesh.bahl]

I have been searching solution to this problem ( ftp access to clients in the presence of squid proxy) since quite some time.  The frox solution seems to work a bit. But again stuck because of this issue.

Any way if you have worked on this problem successfully, please give the details.



Regards
rajesh.bahl

[Ricky]

It was long ago when I was in need to access ftp through squid and was successful, in ftp client, I told it to use squid proxy and it was working.
Btw, what ftp client your people are using ? Also how they are configuring it ?

[rajesh.bahl]

There are different clients. Some are for getting anti virus updates, some are for customised softwares.



regards
rajesh.bahl

[Ricky]

Well.. as I suggested, make sure that squid is set enable ftp "proto" (see its default config file for details) and also passive ftp is allowed.

Then make sure that whatever ftp client it is , is set to use squid proxy server.

If even after that it fails then surely we need some other solution.