Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FTP Client Proxy Package

    Scheduled Pinned Locked Moved Cache/Proxy
    69 Posts 37 Posters 73.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      digidax
      last edited by

      There is no package "ftpproxy".
      "freeradius2" is the last, then "gwled" is the next one.
      Will it be visible after I have done the update?

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        The package is for 2.2.x only…

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          Note for future posters to this thread:
          This thread is for general feedback about the package (commentary, GUI notes, etc) – Problem reports should go into separate threads so they can receive proper/full attention without taking over this thread. Dropping a note here saying it didn't work for you is OK so long as it contains a link to a separate problem thread for further discussion.

          Thanks!

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • K
            kawaider
            last edited by

            Hi! Sorry for my bad English.
            I use FTP server on port 1221. In PFsense 2.1 I configure ftphelper with option debug.pfftpports. But in PFsense 2.2 I can't confirure packet "FTP client proxy" for work with port differing from 21. Help, please!

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              The ftp-proxy(8) daemon seems to only work properly with a server on port 21, so there does not appear be a way to accommodate that scenario at this time.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                Whatever you do, don't use a vpn.  That would be too easy…

                1 Reply Last reply Reply Quote 0
                • C
                  corotte
                  last edited by

                  Thank you very much for this package !!  ;D

                  that should do the trick for some of my customers who are stuck with application that use "archaic" FTP Active client to update :)

                  Will try it in next maintenance  8)

                  1 Reply Last reply Reply Quote 0
                  • L
                    lpandolfini
                    last edited by

                    Thank you very much for this package!

                    I have a little problem with one WAN and multiple LAN, with different VIPs used for outgoing traffic (one per LAN), the post is this:
                    https://forum.pfsense.org/index.php?topic=91638.0

                    Thanks.
                    Luca

                    1 Reply Last reply Reply Quote 0
                    • M
                      Marlenio
                      last edited by

                      Hi,
                      is it possible to add more than one ip on bypass list?

                      Marlenio

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        @Marlenio:

                        is it possible to add more than one ip on bypass list?

                        Make an alias and put the alias name there.

                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • M
                          Marlenio
                          last edited by

                          @jimp:

                          Make an alias and put the alias name there.

                          Thanks in advance. :) :)

                          Marlenio

                          1 Reply Last reply Reply Quote 0
                          • M
                            Marlenio
                            last edited by

                            @Marlenio:

                            @jimp:

                            Make an alias and put the alias name there.

                            Thanks in advance. :) :)

                            I try. I made an alias with two Ip and put the name in "Proxy Bypass: Destination", restart service, but it doesn't works.

                            EDIT: alias works if declare IPs like a "/32" network, but not like single host. :)

                            Marlenio

                            1 Reply Last reply Reply Quote 0
                            • luckman212L
                              luckman212 LAYER 8
                              last edited by

                              jimp-

                              Just wanted to thank you wholeheartedly for this package. I know FTP is 'discouraged' but sadly we can't always force these decisions on users when legacy systems are in place and working. This package has saved us a lot of headache.

                              bravo sir

                              1 Reply Last reply Reply Quote 0
                              • H
                                h.kling
                                last edited by

                                Dear Jimp,

                                thank you VERY MUCH for this great package!

                                Is it possible to modify package and GUI to realize an explicit proxy environment?

                                Best wishes

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tmc
                                  last edited by

                                  Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                                  Hope this make sense - any ideas?

                                  1 Reply Last reply Reply Quote 0
                                  • jimpJ
                                    jimp Rebel Alliance Developer Netgate
                                    last edited by

                                    @klingone:

                                    Is it possible to modify package and GUI to realize an explicit proxy environment?

                                    Not that I'm aware of. If you need an explicit proxy, I believe that squid can handle that.

                                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                    Need help fast? Netgate Global Support!

                                    Do not Chat/PM for help!

                                    1 Reply Last reply Reply Quote 0
                                    • jimpJ
                                      jimp Rebel Alliance Developer Netgate
                                      last edited by

                                      @tmc:

                                      Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                                      I use it here with multiple boxes in series and it's OK but I don't use VIPs or send it out an alternate WAN (just the default WAN at my edge, not my second WAN).

                                      When using load balancing or multi-wan, the FTP traffic (including high data ports) would have to exit the default WAN or the proxy won't work correctly.

                                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                      Need help fast? Netgate Global Support!

                                      Do not Chat/PM for help!

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        rougement
                                        last edited by

                                        I've been banging my head against a brick wall trying to get an old FTP client to work properly. Thank you so much for your work, I appreciate it.

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          stavros
                                          last edited by

                                          Hi, i need some help on configuring FTP Client Proxy Package in order to give ftp access on my network. I have 2 wan (WAN1 & WAN2) and one LAN interface.

                                          Local Interface: I select only LAN ?
                                          Anonymous Only: Not checked
                                          Source Address: I put one of the two public WAN ip address?
                                          Proxy Bypass Source: None
                                          Proxy Bypass Dest: None
                                          Bind Port: None
                                          Maximum Sessions (Default: 100): None
                                          Traffic Shaping Queue: None
                                          Rewrite Source to Port 20 : Not checked
                                          Idle Timeout (Default: 86400) : None
                                          Log Connections : Not Checked

                                          Do i need any other configuration? I use filezilla ftp server.

                                          sorry but my knowledge is very basic on this staff.

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            doktornotor Banned
                                            last edited by

                                            @stavros:

                                            Do i need any other configuration? I use filezilla ftp server.

                                            This package is for FTP clients using active mode behind pfSense.

                                            https://doc.pfsense.org/index.php/FTP_without_a_Proxy

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.