On Thu, Mar 22, 2001 at 06:45:26PM +0100, Sven Koch wrote: > On Thu, 22 Mar 2001, Craig Schlenter wrote: > > same way as it does http but I think the answer is no. I do know that squid > > will proxy ftp for you if you point your browser ftp proxy settings at it > > manually however. > > Squid can't talk ftp to your client, it can only talk ftp to the servers. > If you configure your browser to use a "ftp-proxy" it talks http to the > proxy, which then does the ftp requests. Yes, I did explicitely mention 'your browser' ;) Without proxy settings, your browser will do ftp directly so squid is useless in that scenario :( > > What I was saying however is that you don't need a separate program to > > 'proxy' your ftp. It's built into the kernel provided you compile the > > right modules and tweak the right settings. > > The kernel only knows about NATing ftp - which is different from proxying. Well it does dig into the protocol so it's not pure NAT. I'd be tempted to call it 'protocol aware connection tracking' :) > I think what Roman asks' is about a program which he could > transparently redirect his clients ftp-connections to and which will > cache/mangle/whatever the transfers. I believe the ftp-gw proxy allowed you to limit the 'ftp command set' at some point but I haven't seen anything more sophisticated than that, and definitely not transparently (well gauntet's use ftp-gw in transparent mode but I don't think the 'public' version was ever made to work transparently) ... Cheers, --C - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org