Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FTP Client Proxy Package

    Scheduled Pinned Locked Moved Cache/Proxy
    69 Posts 37 Posters 73.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kawaider
      last edited by

      Hi! Sorry for my bad English.
      I use FTP server on port 1221. In PFsense 2.1 I configure ftphelper with option debug.pfftpports. But in PFsense 2.2 I can't confirure packet "FTP client proxy" for work with port differing from 21. Help, please!

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        The ftp-proxy(8) daemon seems to only work properly with a server on port 21, so there does not appear be a way to accommodate that scenario at this time.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          Whatever you do, don't use a vpn.  That would be too easy…

          1 Reply Last reply Reply Quote 0
          • C
            corotte
            last edited by

            Thank you very much for this package !!  ;D

            that should do the trick for some of my customers who are stuck with application that use "archaic" FTP Active client to update :)

            Will try it in next maintenance  8)

            1 Reply Last reply Reply Quote 0
            • L
              lpandolfini
              last edited by

              Thank you very much for this package!

              I have a little problem with one WAN and multiple LAN, with different VIPs used for outgoing traffic (one per LAN), the post is this:
              https://forum.pfsense.org/index.php?topic=91638.0

              Thanks.
              Luca

              1 Reply Last reply Reply Quote 0
              • M
                Marlenio
                last edited by

                Hi,
                is it possible to add more than one ip on bypass list?

                Marlenio

                1 Reply Last reply Reply Quote 0
                • jimpJ
                  jimp Rebel Alliance Developer Netgate
                  last edited by

                  @Marlenio:

                  is it possible to add more than one ip on bypass list?

                  Make an alias and put the alias name there.

                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                  Need help fast? Netgate Global Support!

                  Do not Chat/PM for help!

                  1 Reply Last reply Reply Quote 0
                  • M
                    Marlenio
                    last edited by

                    @jimp:

                    Make an alias and put the alias name there.

                    Thanks in advance. :) :)

                    Marlenio

                    1 Reply Last reply Reply Quote 0
                    • M
                      Marlenio
                      last edited by

                      @Marlenio:

                      @jimp:

                      Make an alias and put the alias name there.

                      Thanks in advance. :) :)

                      I try. I made an alias with two Ip and put the name in "Proxy Bypass: Destination", restart service, but it doesn't works.

                      EDIT: alias works if declare IPs like a "/32" network, but not like single host. :)

                      Marlenio

                      1 Reply Last reply Reply Quote 0
                      • luckman212L
                        luckman212 LAYER 8
                        last edited by

                        jimp-

                        Just wanted to thank you wholeheartedly for this package. I know FTP is 'discouraged' but sadly we can't always force these decisions on users when legacy systems are in place and working. This package has saved us a lot of headache.

                        bravo sir

                        1 Reply Last reply Reply Quote 0
                        • H
                          h.kling
                          last edited by

                          Dear Jimp,

                          thank you VERY MUCH for this great package!

                          Is it possible to modify package and GUI to realize an explicit proxy environment?

                          Best wishes

                          1 Reply Last reply Reply Quote 0
                          • T
                            tmc
                            last edited by

                            Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                            Hope this make sense - any ideas?

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              @klingone:

                              Is it possible to modify package and GUI to realize an explicit proxy environment?

                              Not that I'm aware of. If you need an explicit proxy, I believe that squid can handle that.

                              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                @tmc:

                                Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                                I use it here with multiple boxes in series and it's OK but I don't use VIPs or send it out an alternate WAN (just the default WAN at my edge, not my second WAN).

                                When using load balancing or multi-wan, the FTP traffic (including high data ports) would have to exit the default WAN or the proxy won't work correctly.

                                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                1 Reply Last reply Reply Quote 0
                                • R
                                  rougement
                                  last edited by

                                  I've been banging my head against a brick wall trying to get an old FTP client to work properly. Thank you so much for your work, I appreciate it.

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    stavros
                                    last edited by

                                    Hi, i need some help on configuring FTP Client Proxy Package in order to give ftp access on my network. I have 2 wan (WAN1 & WAN2) and one LAN interface.

                                    Local Interface: I select only LAN ?
                                    Anonymous Only: Not checked
                                    Source Address: I put one of the two public WAN ip address?
                                    Proxy Bypass Source: None
                                    Proxy Bypass Dest: None
                                    Bind Port: None
                                    Maximum Sessions (Default: 100): None
                                    Traffic Shaping Queue: None
                                    Rewrite Source to Port 20 : Not checked
                                    Idle Timeout (Default: 86400) : None
                                    Log Connections : Not Checked

                                    Do i need any other configuration? I use filezilla ftp server.

                                    sorry but my knowledge is very basic on this staff.

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      doktornotor Banned
                                      last edited by

                                      @stavros:

                                      Do i need any other configuration? I use filezilla ftp server.

                                      This package is for FTP clients using active mode behind pfSense.

                                      https://doc.pfsense.org/index.php/FTP_without_a_Proxy

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        svenruben
                                        last edited by

                                        Many thanks for building this package, install, enable, assign client interfaces ALL DONE. You safed my day! thanks a lot. sven

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          dlawley
                                          last edited by

                                          Is this suppose to add rules needed to make it work? Or do I need to the config manually as listed here?

                                          http://www.freebsd.org/cgi/man.cgi?query=ftp-proxy&sektion=8

                                          I ask as it appears that none are added…

                                          using 2.2.4-RELEASE (amd64) FTP Client Proxy 0.2.1

                                          1 Reply Last reply Reply Quote 0
                                          • jimpJ
                                            jimp Rebel Alliance Developer Netgate
                                            last edited by

                                            There is no need to add anything manually. Install the package and pick the settings. If you have a problem, please start a new thread for assistance.

                                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                            Need help fast? Netgate Global Support!

                                            Do not Chat/PM for help!

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.