Re: [squid-users] What can squid filter on?

It is only Internet Explorer that gets confused when using a HTTP proxy
for FTP access.

You should be able to download stuff fine (if you can't then you have
one of the broken IE versions or IE addons), but if you want to upload
files then use Netscape or some other browser who knows how to upload
FTP via a HTTP proxy.

--
Henrik Nordstrom
Squid Hacker
Albert Woodard wrote:
> 
> Henrik,
> I'm new to Linux and Squid, but I'm learning each day. I have a question
> about a "ftp proxy warning" that my user is getting. It says: " The folder
> "ftp://ftp.hcrec.com is read only because the  proxy server is not set up
> to allow full access. Is there a security setting in Linux\Squid that will
> allow this user to get to ftp sites? If so could you forward that to me and
> I'll try my hand at changing security in Linux.
> 
> Thanks
> 
> Albert Woodard
> IT Manager
> Physicians Network Management
> awoodard@pnmnet.com
> (615)329.8044 x713
> 
> -----Original Message-----
> From:   Henrik Nordstrom [SMTP:hno@hem.passagen.se]
> Sent:   Friday, March 30, 2001 5:13 PM
> To:     Joe Viel
> Cc:     squid-users@squid-cache.org
> Subject:        Re: [squid-users] What can squid filter on?
> 
> Joe Viel wrote:
> >
> > Does squid only do filtering for HTTP, SMTP , and a few other common
> protocols, or can any two applications talk TCP over squid?
> 
> Yes, no, no, maybe.
> 
> Squid is a HTTP proxy, period.
> 
> SMTP is not understood
> 
> Other protocols is not understood
> 
> Some TCP applications can be made to abuse the HTTP proxy to tunnel
> non-HTTP traffic over the HTTP proxy, but not without modifications to
> the applications, and in most times squid.conf allowing the ports to be
> used for CONNECT
> 
> well.. there are ofcourse ways to tunnel anything over anything... for
> example SSH port forwarding over PPP over HTTP but I can imagine people
> have done worse things. The sad fact is that if there is a communication
> channel capable of something out and getting something in response then
> this channel can be abused for tunneling by some clever person having
> access to both sides of the channel.
> 
> --
> Henrik Nordstrom
> Squid hacker