Re: [users@httpd] Proxying active ftp

Emmanuel E <emmanuel.e@xxxxxxx> · Wed, 10 May 2006 09:14:21 +0530

yes ftp cannot be proxied easily. once a control connection is 

established (that is on port 21), information is exchanged as to which 

ports will be used to transfer the data. the mod_proxy/mod_proxy_ftp 

modules respond in http format to ftp requests. that is they process the 

ftp request internally on their own using the ftp protocol but the 

response is always http. so ftp will not work.

what is happening in your case is that your ftp clients are making a 

http request for a ftp resource via a http proxy server. thats why it 

works. i am not sure why your client tries to use a proxy when it is 

asked to do active ftp.

also your configuration seems a bit weird. you are running apache on 

port 21. running it on port 21 dosent make it an ftp server. i am 

drawing these conclusions from the following line -

The proxy server could not handle the request GET
ftp://xxxx/products/xxxx/xxxxx/xxxx.exe

if i am guessing right you must be setting proxy to xxxx:9982 in your 

ftp client. its a wonder that it works when u disable active ftp.

cheers,
emmanuel

Browne, Anthony A wrote:

Hello everyone,

	I have a virtual host that needs to proxy ftp. The config for it
is:

<VirtualHost *:9982>
ServerAdmin xxxx
ServerName xxxx:9982

LogFormat "%t %h %{Host}i \"%r\" %s %B" ftpcommon 

CustomLog logs/9982_access.log ftpcommon 

ProxyRequests On 

</VirtualHost>

The problem is that when clients try active ftp connections, they get:

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET
ftp://xxxx/products/xxxx/xxxxx/xxxx.exe

Reason: connect to xxxx:62715 failed - firewall/NAT?
------------------------------------------------------------------------
Apache/2.0.54 (Win32) Server at xxxx Port 21

I assume that its active ftp that's causing the problem because of the

port numbers, 

but in any event I don't know what to do next. I've tried a bunch of

things and none 

of them have worked. Anyone, have any suggestions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx