Hi Krist, Yes of course, my WinSCP client use passive FTP and apache listen on the control port (21) ! When the FTP server send back the port to connect to for DATA, the client attempts to open the connection using this dynamic port, but the apache proxy refused to forward the HTTP CONNECT to the FTP server and send back to the client a 403 Forbidden response. See the small attached dump file which illustrate the problem : 192.168.1.1 : the client 192.168.3.2 : apache proxy 10.194.124.173 : the FTP server It works fine with other FTP proxy like "squid" or "netcache", it should be possible to configure apache to do that also ? Thanks. -----Message d'origine----- De : Krist van Besien [mailto:krist.vanbesien@xxxxxxxxx] Envoyé : lundi 8 novembre 2010 13:01 À : users@xxxxxxxxxxxxxxxx Objet : Re: How to proxy FTP protocol with WinSCP client ? On Mon, Nov 8, 2010 at 11:56 AM, <denis.barbaron@xxxxxxxxxxxxxxxxxx> wrote: > The AlllowCONNECT directive permits only to use static ports, and I > didn't find other directives to solve my problem ! > The same configuration with WinSCP client works fine with "squid", but > I prefer to use apache for other reasons, so can you help me to solve > this problem ? For information, when I use another client like IE, it > works fine also but the HTTP method used is GET and not CONNECT... The solution is to use passive FTP in your ftp client. For CONNECT to a dynamic port to work it would be necessary for apache to listen in on the FTPO control connection to know what port the client will attempt to use. Krist -- krist.vanbesien@xxxxxxxxx krist@xxxxxxxxxxxxx Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
Attachment:
traceProxyFTP.pcap
Description: traceProxyFTP.pcap
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|