FTP Client Proxy Package

digidax · Mar 18, 2015, 7:24 AM

How can I install this package?
Was going back to 2.1.5 and want now try to update to 2.2.1 with working FTP outgoing from LAN.

best regards
Frank

doktornotor · Mar 18, 2015, 7:32 AM

@digidax:

Was going back to 2.1.5 and want now try to update to 2.2.1 with working FTP outgoing from LAN.

Like any other package. System - Packages.

digidax · Mar 18, 2015, 7:54 AM

There is no package "ftpproxy".
"freeradius2" is the last, then "gwled" is the next one.
Will it be visible after I have done the update?

doktornotor · Mar 18, 2015, 8:02 AM

The package is for 2.2.x only…

jimp · Mar 24, 2015, 12:11 PM

Note for future posters to this thread:
This thread is for general feedback about the package (commentary, GUI notes, etc) – Problem reports should go into separate threads so they can receive proper/full attention without taking over this thread. Dropping a note here saying it didn't work for you is OK so long as it contains a link to a separate problem thread for further discussion.

Thanks!

kawaider · Mar 26, 2015, 10:28 AM

Hi! Sorry for my bad English.
I use FTP server on port 1221. In PFsense 2.1 I configure ftphelper with option debug.pfftpports. But in PFsense 2.2 I can't confirure packet "FTP client proxy" for work with port differing from 21. Help, please!

jimp · Mar 26, 2015, 12:14 PM

The ftp-proxy(8) daemon seems to only work properly with a server on port 21, so there does not appear be a way to accommodate that scenario at this time.

kejianshi · Mar 26, 2015, 1:29 PM

Whatever you do, don't use a vpn. That would be too easy…

corotte · Mar 28, 2015, 2:27 PM

Thank you very much for this package !! ;D

that should do the trick for some of my customers who are stuck with application that use "archaic" FTP Active client to update :)

Will try it in next maintenance 8)

lpandolfini · Apr 1, 2015, 7:44 AM

Thank you very much for this package!

I have a little problem with one WAN and multiple LAN, with different VIPs used for outgoing traffic (one per LAN), the post is this:
https://forum.pfsense.org/index.php?topic=91638.0

Thanks.
Luca

Marlenio · Apr 1, 2015, 1:37 PM

Hi,
is it possible to add more than one ip on bypass list?

jimp · Apr 1, 2015, 1:41 PM

@Marlenio:

is it possible to add more than one ip on bypass list?

Make an alias and put the alias name there.

Marlenio · Apr 1, 2015, 1:45 PM

@jimp:

Make an alias and put the alias name there.

Thanks in advance. :) :)

Marlenio · Apr 1, 2015, 1:55 PM

@Marlenio:

@jimp:

Make an alias and put the alias name there.

Thanks in advance. :) :)

I try. I made an alias with two Ip and put the name in "Proxy Bypass: Destination", restart service, but it doesn't works.

EDIT: alias works if declare IPs like a "/32" network, but not like single host. :)

luckman212 · Apr 7, 2015, 1:18 PM

jimp-

Just wanted to thank you wholeheartedly for this package. I know FTP is 'discouraged' but sadly we can't always force these decisions on users when legacy systems are in place and working. This package has saved us a lot of headache.

bravo sir

h.kling · Apr 30, 2015, 8:23 AM

Dear Jimp,

thank you VERY MUCH for this great package!

Is it possible to modify package and GUI to realize an explicit proxy environment?

Best wishes

tmc · May 13, 2015, 6:10 PM

Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session. If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

Hope this make sense - any ideas?

jimp · May 28, 2015, 4:27 PM

@klingone:

Is it possible to modify package and GUI to realize an explicit proxy environment?

Not that I'm aware of. If you need an explicit proxy, I believe that squid can handle that.

jimp · May 28, 2015, 4:28 PM

@tmc:

Have an issue with 2 in-series PFSense boxes… the 2nd one is on a LAN (Opt1 on PFSense #1 / all traffic in-and-out for that LAN on WAN Virtual IP and NAT'd through to 2nd pfSense) and needs to get out to WAN for Active FTP Session. If I set the 2nd pfSense FTP Client Proxy to WAN external address it won't connect at all, but if I set it to default (WAN - which is actually LAN going to Opt1 in first pfSense), it connects but will not open data port.

I use it here with multiple boxes in series and it's OK but I don't use VIPs or send it out an alternate WAN (just the default WAN at my edge, not my second WAN).

When using load balancing or multi-wan, the FTP traffic (including high data ports) would have to exit the default WAN or the proxy won't work correctly.

rougement · Jun 19, 2015, 5:45 AM

I've been banging my head against a brick wall trying to get an old FTP client to work properly. Thank you so much for your work, I appreciate it.