Squid 3.5.21: ftp_port intercept doesn't work

[oleg gv <oagvozd@xxxxxxxxx>]

Hello

I've setup in Squid 3.5.21 on my gateway : ftp_port 10.0.0.1:2121 intercept and create nat rule to redirect from port 21 to 2121 for client source address (for example 10.0.0.10)

Then trying to go through browser to ftp://ftp.intel.com from client 10.0.0.10

And in browser got Password prompt window: i set user anonymous and password a@a

Then got error message 501 Missing Host.

In squid log I see:

2016/10/03 15:34:24.504 kid1| 20,2| store.cc(949) checkCachable: StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:24.508 kid1| 33,2| client_side.cc(816) swanSong: local=10.0.0.1:2121 remote=10.0.0.10:37016 flags=1
2016/10/03 15:34:24.508 kid1| 5,2| TcpAcceptor.cc(220) doAccept: New connection on FD 10
2016/10/03 15:34:24.508 kid1| 5,2| TcpAcceptor.cc(295) acceptNext: connection on local=0.0.0.0:2121 remote=[::] FD 10 flags=9
2016/10/03 15:34:29.534 kid1| 33,2| FtpServer.cc(699) parseOneRequest: >>ftp USER anonymous
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable: StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable: StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable: StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.534 kid1| 88,2| client_side_reply.cc(2005) processReplyAccessResult: The reply for NONE error:ftp-missing-host is ALLOWED, because it matched NO ACL's
2016/10/03 15:34:29.534 kid1| 9,2| FtpServer.cc(1208) writeForwardedReplyAndCall: FTP Client local=10.0.0.254:2121 remote=10.0.0.10:37018 FD 13 flags=1
2016/10/03 15:34:29.534 kid1| 9,2| FtpServer.cc(1210) writeForwardedReplyAndCall: FTP Client REPLY:
---------
501 Missing host

----------
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable: StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.574 kid1| 33,2| client_side.cc(816) swanSong: local=10.0.0.1:2121 remote=10.0.0.10:37018 flags=1

Though I can not use native ftp relay to go to ftp servers.

Please, could you help ?

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users