Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FTP Client Proxy Package

    Scheduled Pinned Locked Moved Cache/Proxy
    69 Posts 37 Posters 72.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      Whatever you do, don't use a vpn.  That would be too easy…

      1 Reply Last reply Reply Quote 0
      • C
        corotte
        last edited by

        Thank you very much for this package !!  ;D

        that should do the trick for some of my customers who are stuck with application that use "archaic" FTP Active client to update :)

        Will try it in next maintenance  8)

        1 Reply Last reply Reply Quote 0
        • L
          lpandolfini
          last edited by

          Thank you very much for this package!

          I have a little problem with one WAN and multiple LAN, with different VIPs used for outgoing traffic (one per LAN), the post is this:
          https://forum.pfsense.org/index.php?topic=91638.0

          Thanks.
          Luca

          1 Reply Last reply Reply Quote 0
          • M
            Marlenio
            last edited by

            Hi,
            is it possible to add more than one ip on bypass list?

            Marlenio

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              @Marlenio:

              is it possible to add more than one ip on bypass list?

              Make an alias and put the alias name there.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • M
                Marlenio
                last edited by

                @jimp:

                Make an alias and put the alias name there.

                Thanks in advance. :) :)

                Marlenio

                1 Reply Last reply Reply Quote 0
                • M
                  Marlenio
                  last edited by

                  @Marlenio:

                  @jimp:

                  Make an alias and put the alias name there.

                  Thanks in advance. :) :)

                  I try. I made an alias with two Ip and put the name in "Proxy Bypass: Destination", restart service, but it doesn't works.

                  EDIT: alias works if declare IPs like a "/32" network, but not like single host. :)

                  Marlenio

                  1 Reply Last reply Reply Quote 0
                  • luckman212L
                    luckman212 LAYER 8
                    last edited by

                    jimp-

                    Just wanted to thank you wholeheartedly for this package. I know FTP is 'discouraged' but sadly we can't always force these decisions on users when legacy systems are in place and working. This package has saved us a lot of headache.

                    bravo sir

                    1 Reply Last reply Reply Quote 0
                    • H
                      h.kling
                      last edited by

                      Dear Jimp,

                      thank you VERY MUCH for this great package!

                      Is it possible to modify package and GUI to realize an explicit proxy environment?

                      Best wishes

                      1 Reply Last reply Reply Quote 0
                      • T
                        tmc
                        last edited by

                        Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                        Hope this make sense - any ideas?

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          @klingone:

                          Is it possible to modify package and GUI to realize an explicit proxy environment?

                          Not that I'm aware of. If you need an explicit proxy, I believe that squid can handle that.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • jimpJ
                            jimp Rebel Alliance Developer Netgate
                            last edited by

                            @tmc:

                            Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                            I use it here with multiple boxes in series and it's OK but I don't use VIPs or send it out an alternate WAN (just the default WAN at my edge, not my second WAN).

                            When using load balancing or multi-wan, the FTP traffic (including high data ports) would have to exit the default WAN or the proxy won't work correctly.

                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                            Need help fast? Netgate Global Support!

                            Do not Chat/PM for help!

                            1 Reply Last reply Reply Quote 0
                            • R
                              rougement
                              last edited by

                              I've been banging my head against a brick wall trying to get an old FTP client to work properly. Thank you so much for your work, I appreciate it.

                              1 Reply Last reply Reply Quote 0
                              • S
                                stavros
                                last edited by

                                Hi, i need some help on configuring FTP Client Proxy Package in order to give ftp access on my network. I have 2 wan (WAN1 & WAN2) and one LAN interface.

                                Local Interface: I select only LAN ?
                                Anonymous Only: Not checked
                                Source Address: I put one of the two public WAN ip address?
                                Proxy Bypass Source: None
                                Proxy Bypass Dest: None
                                Bind Port: None
                                Maximum Sessions (Default: 100): None
                                Traffic Shaping Queue: None
                                Rewrite Source to Port 20 : Not checked
                                Idle Timeout (Default: 86400) : None
                                Log Connections : Not Checked

                                Do i need any other configuration? I use filezilla ftp server.

                                sorry but my knowledge is very basic on this staff.

                                1 Reply Last reply Reply Quote 0
                                • D
                                  doktornotor Banned
                                  last edited by

                                  @stavros:

                                  Do i need any other configuration? I use filezilla ftp server.

                                  This package is for FTP clients using active mode behind pfSense.

                                  https://doc.pfsense.org/index.php/FTP_without_a_Proxy

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    svenruben
                                    last edited by

                                    Many thanks for building this package, install, enable, assign client interfaces ALL DONE. You safed my day! thanks a lot. sven

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      dlawley
                                      last edited by

                                      Is this suppose to add rules needed to make it work? Or do I need to the config manually as listed here?

                                      http://www.freebsd.org/cgi/man.cgi?query=ftp-proxy&sektion=8

                                      I ask as it appears that none are added…

                                      using 2.2.4-RELEASE (amd64) FTP Client Proxy 0.2.1

                                      1 Reply Last reply Reply Quote 0
                                      • jimpJ
                                        jimp Rebel Alliance Developer Netgate
                                        last edited by

                                        There is no need to add anything manually. Install the package and pick the settings. If you have a problem, please start a new thread for assistance.

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          jkramp
                                          last edited by

                                          Why oh why doesn't pfSense bundle with this plug-in, I have been trouble shooting in the other end and then it was pfSense the entire time.

                                          Thanks a bunch for this jimp - it working absolutly perfect and finally my Check Point has stopped yelling "Unable to Parse FTP PORT/227 command - header IP different from command IP".

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            akong
                                            last edited by

                                            I have installed FTP Client Proxy Package 0.3 Beta and setup on LAN.But filezilla can't connect it.The filezilla message is follow:

                                            Status: Resolving address of ftp.aspa.idv.tw
                                            Status: Connecting to 219.85.218.78:21…
                                            Status: Connection established, waiting for welcome message...
                                            Status: Insecure server, it does not support FTP over TLS.
                                            Status: Connected
                                            Status: Retrieving directory listing...
                                            Status: Server sent passive reply with unroutable address. Using server address instead.

                                            In older version can use it.How to fix it?My ftp server is used passive mode.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.