httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From <denis.barba...@orange-ftgroup.com>
Subject RE: [users@httpd] How to proxy FTP protocol with WinSCP client ?
Date Mon, 08 Nov 2010 14:02:37 GMT
Hi Krist,

Yes of course, my WinSCP client use passive FTP and apache listen on the control port (21)
!

When the FTP server send back the port to connect to for DATA, the client attempts to open
the connection using this dynamic port, but the apache proxy refused to forward the HTTP CONNECT
to the FTP server and send back to the client a 403 Forbidden response.

See the small attached dump file which illustrate the problem : 
192.168.1.1 : the client
192.168.3.2 : apache proxy
10.194.124.173 : the FTP server

It works fine with other FTP proxy like "squid" or "netcache", it should be possible to configure
apache to do that also ?
Thanks. 

-----Message d'origine-----
De : Krist van Besien [mailto:krist.vanbesien@gmail.com] 
Envoyé : lundi 8 novembre 2010 13:01
À : users@httpd.apache.org
Objet : Re: [users@httpd] How to proxy FTP protocol with WinSCP client ?

On Mon, Nov 8, 2010 at 11:56 AM,  <denis.barbaron@orange-ftgroup.com> wrote:

> The AlllowCONNECT directive permits only to use static ports, and I 
> didn't find other directives to solve my problem !
> The same configuration with WinSCP client works fine with "squid", but 
> I prefer to use apache for other reasons, so can you help me to solve 
> this problem ? For information, when I use another client like IE, it 
> works fine also but the HTTP method used is GET and not CONNECT...

The solution is to use passive FTP in your ftp client. For CONNECT to a dynamic port to work
it would be necessary for apache to listen in on the FTPO control connection to know what
port the client will attempt to use.

Krist

--
krist.vanbesien@gmail.com
krist@vanbesien.org
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message