I'm using kernel 2.6.32. I read, that there's a problem with Tproxy and Kernel 2.6.32 (http://wiki.squid-cache.org/Features/Tproxy4). Could this perhaps be the same problem? In the accesslog I have the following entry: 1276164891.054 14880 xx.xx.xx.xx TCP_MISS/504 3865 GET ftp://ftp.gnu.org/ user1 DIRECT/140.186.70.20 text/html Thanks. Tom 2010/6/10 Amos Jeffries <squid3@xxxxxxxxxxxxx>: > Tom Tux wrote: >> >> Hi >> With Squid 3.1.3, I'm not able to connect a ftp-site (ex. >> ftp://ftp.gnu.org/). The squid-process tries to connect the ftp-server > > Error message generated by the failure please. > >> with a dynamic port (not tcp 21). This will be blocked through our >> firewall: >> tcp 0 1 squidproxy:37656 ftp.gnu.org:64789 SYN_SENT >> 106 562158 6442/(squid) >> >> I have a analog configuration with squid 3.0.STABLE 23 and there it >> works. The squid-process connect the remote-ftp-server with the normal >> port tcp 21. >> >> What could be wrong here? > > I think that port you see is one of the DATA channels FTP protocol uses, > separate to the control channel on port 21. > > Amos > -- > Please be using > Current Stable Squid 2.7.STABLE9 or 3.1.4 >