FTP Client Proxy Package

jordi

Thanks for this package.

We are in a multi-wan configuration, with a special failover configuration. Some specific outbound connections use WAN1 as gateway and the rest use WAN2.

In our case, instead of 'Proxy Bypass' addresses, we would need it the other way round: use it for specific outbound connections (all using WAN1), and bypass the rest.
As it is now, when we activate this package, all problematic connections going through WAN1 work (great!), but then all FTP connections using WAN2 stop working… we cannot set all FTP through WAN1.

Is there any way to get this?

Thanks a lot for your help.

Regards from Barcelona,
Jordi.

jimp

No, there is no way to accommodate policy routing or use any WAN but the default gateway, the ftp-proxy daemon is not capable of it.

jordi

@jimp:

No, there is no way to accommodate policy routing or use any WAN but the default gateway, the ftp-proxy daemon is not capable of it.

Thanks for your fast response. I get it.

Anyway, In our case an option just the opposite to 'Proxy Bypass: Destination' (something like 'Proxy Use: Destination' - and bypass every other IPs) would do it. I drop it just in case you are looking for new features to add in the next release ;)

Thanks again.

Regards from Barcelona,

Jordi.

decibel83

Hi,
I have a problem with the FTP Proxy package on pfSense 2.2.2.
I opened a thread about this problem: https://forum.pfsense.org/index.php?topic=113899.0
Thanks!

Jorval

Thanks jimp for this Package!

i had trouble with an external ftp connection.
installed your package and it worked right out-of-the-box!

thanks a lot.

itd

Hi

Is this package compatible with 2.3.1-RELEASE-p5?

Best regards

Steve

Marlenio

Yes, it is. If found in package list, then it's compatible. :)

mka

@Marlenio:

@Marlenio:

@jimp:

Make an alias and put the alias name there.

Thanks in advance. :) :)

I try. I made an alias with two Ip and put the name in "Proxy Bypass: Destination", restart service, but it doesn't works.

EDIT: alias works if declare IPs like a "/32" network, but not like single host. :)

Did not worked for me but a workaroud is to create a NAT rule per destination on port 21 and tick the "No RDR (NOT)" option to bypass the proxy.

shaunikwadhawan

Hi All,

I am facing an issue where I cannot get my clients(on WAN side) to connect to FTP server (On LAN side). I have installed the ftp-proxy and also included the conntrack and passive rules to the ftp server. Whenever I try to connect via Filezilla it disconnects right after the PASV command.

Below is the network:

3750 Switch (WAN) >>>>>(WAN)Pfsense(LAN)>>>>>FTP Server.

When I run a copy ftp command it times out. I can telnet to port 21 and without pfsense it works just fine.

Windows cmd ftp works fine and filexilla work fine for active mode. However for passive I just cant seem to connect.

Appreciate your help.

Thanks.

jimp

This proxy is not intended for that scenario, it is for clients on LAN connecting to remote FTP servers. Please start a new thread for that question.