Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FTP Client Proxy Package

    Scheduled Pinned Locked Moved Cache/Proxy
    69 Posts 37 Posters 72.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      corotte
      last edited by

      Thank you very much for this package !!  ;D

      that should do the trick for some of my customers who are stuck with application that use "archaic" FTP Active client to update :)

      Will try it in next maintenance  8)

      1 Reply Last reply Reply Quote 0
      • L
        lpandolfini
        last edited by

        Thank you very much for this package!

        I have a little problem with one WAN and multiple LAN, with different VIPs used for outgoing traffic (one per LAN), the post is this:
        https://forum.pfsense.org/index.php?topic=91638.0

        Thanks.
        Luca

        1 Reply Last reply Reply Quote 0
        • M
          Marlenio
          last edited by

          Hi,
          is it possible to add more than one ip on bypass list?

          Marlenio

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            @Marlenio:

            is it possible to add more than one ip on bypass list?

            Make an alias and put the alias name there.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • M
              Marlenio
              last edited by

              @jimp:

              Make an alias and put the alias name there.

              Thanks in advance. :) :)

              Marlenio

              1 Reply Last reply Reply Quote 0
              • M
                Marlenio
                last edited by

                @Marlenio:

                @jimp:

                Make an alias and put the alias name there.

                Thanks in advance. :) :)

                I try. I made an alias with two Ip and put the name in "Proxy Bypass: Destination", restart service, but it doesn't works.

                EDIT: alias works if declare IPs like a "/32" network, but not like single host. :)

                Marlenio

                1 Reply Last reply Reply Quote 0
                • luckman212L
                  luckman212 LAYER 8
                  last edited by

                  jimp-

                  Just wanted to thank you wholeheartedly for this package. I know FTP is 'discouraged' but sadly we can't always force these decisions on users when legacy systems are in place and working. This package has saved us a lot of headache.

                  bravo sir

                  1 Reply Last reply Reply Quote 0
                  • H
                    h.kling
                    last edited by

                    Dear Jimp,

                    thank you VERY MUCH for this great package!

                    Is it possible to modify package and GUI to realize an explicit proxy environment?

                    Best wishes

                    1 Reply Last reply Reply Quote 0
                    • T
                      tmc
                      last edited by

                      Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                      Hope this make sense - any ideas?

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        @klingone:

                        Is it possible to modify package and GUI to realize an explicit proxy environment?

                        Not that I'm aware of. If you need an explicit proxy, I believe that squid can handle that.

                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          @tmc:

                          Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session.  If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

                          I use it here with multiple boxes in series and it's OK but I don't use VIPs or send it out an alternate WAN (just the default WAN at my edge, not my second WAN).

                          When using load balancing or multi-wan, the FTP traffic (including high data ports) would have to exit the default WAN or the proxy won't work correctly.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • R
                            rougement
                            last edited by

                            I've been banging my head against a brick wall trying to get an old FTP client to work properly. Thank you so much for your work, I appreciate it.

                            1 Reply Last reply Reply Quote 0
                            • S
                              stavros
                              last edited by

                              Hi, i need some help on configuring FTP Client Proxy Package in order to give ftp access on my network. I have 2 wan (WAN1 & WAN2) and one LAN interface.

                              Local Interface: I select only LAN ?
                              Anonymous Only: Not checked
                              Source Address: I put one of the two public WAN ip address?
                              Proxy Bypass Source: None
                              Proxy Bypass Dest: None
                              Bind Port: None
                              Maximum Sessions (Default: 100): None
                              Traffic Shaping Queue: None
                              Rewrite Source to Port 20 : Not checked
                              Idle Timeout (Default: 86400) : None
                              Log Connections : Not Checked

                              Do i need any other configuration? I use filezilla ftp server.

                              sorry but my knowledge is very basic on this staff.

                              1 Reply Last reply Reply Quote 0
                              • D
                                doktornotor Banned
                                last edited by

                                @stavros:

                                Do i need any other configuration? I use filezilla ftp server.

                                This package is for FTP clients using active mode behind pfSense.

                                https://doc.pfsense.org/index.php/FTP_without_a_Proxy

                                1 Reply Last reply Reply Quote 0
                                • S
                                  svenruben
                                  last edited by

                                  Many thanks for building this package, install, enable, assign client interfaces ALL DONE. You safed my day! thanks a lot. sven

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    dlawley
                                    last edited by

                                    Is this suppose to add rules needed to make it work? Or do I need to the config manually as listed here?

                                    http://www.freebsd.org/cgi/man.cgi?query=ftp-proxy&sektion=8

                                    I ask as it appears that none are added…

                                    using 2.2.4-RELEASE (amd64) FTP Client Proxy 0.2.1

                                    1 Reply Last reply Reply Quote 0
                                    • jimpJ
                                      jimp Rebel Alliance Developer Netgate
                                      last edited by

                                      There is no need to add anything manually. Install the package and pick the settings. If you have a problem, please start a new thread for assistance.

                                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                      Need help fast? Netgate Global Support!

                                      Do not Chat/PM for help!

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        jkramp
                                        last edited by

                                        Why oh why doesn't pfSense bundle with this plug-in, I have been trouble shooting in the other end and then it was pfSense the entire time.

                                        Thanks a bunch for this jimp - it working absolutly perfect and finally my Check Point has stopped yelling "Unable to Parse FTP PORT/227 command - header IP different from command IP".

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          akong
                                          last edited by

                                          I have installed FTP Client Proxy Package 0.3 Beta and setup on LAN.But filezilla can't connect it.The filezilla message is follow:

                                          Status: Resolving address of ftp.aspa.idv.tw
                                          Status: Connecting to 219.85.218.78:21…
                                          Status: Connection established, waiting for welcome message...
                                          Status: Insecure server, it does not support FTP over TLS.
                                          Status: Connected
                                          Status: Retrieving directory listing...
                                          Status: Server sent passive reply with unroutable address. Using server address instead.

                                          In older version can use it.How to fix it?My ftp server is used passive mode.

                                          1 Reply Last reply Reply Quote 0
                                          • jimpJ
                                            jimp Rebel Alliance Developer Netgate
                                            last edited by

                                            Please start a new separate thread for problems/troubleshooting.

                                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                            Need help fast? Netgate Global Support!

                                            Do not Chat/PM for help!

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.