On 04/25/2013 08:08 AM, Alex Rousskov wrote:
> Dave, it looks like FileZilla did not receive FTP server Hello from
> Squid. I suggest that you take packet captures before and after Squid,
> to see whether Squid itself has received FTP server Hello from the FTP
> server. If Squid connected to the FTP server but received nothing, then
> the problem is on the FTP server side. Otherwise, the problem may be
> with Squid.
I forgot to mention that even if you succeed with making CONNECT work,
it will not help you with ICAP inspections because Squid will only send
CONNECT request to your ICAP server and not the FTP traffic that happens
inside the HTTP CONNECT tunnel.
If you must use FileZilla, and FileZilla does not support sending HTTP
requests with ftp://urls to HTTP proxies (instead of using CONNECT
tunnels with raw FTP inside), then you must use an FTP proxy that
supports ICAP, not an HTTP proxy.
Our FTP gateway project adds that functionality to Squid. It is not
ready for production use, but simple FTP transactions are supported and
code is available: http://wiki.squid-cache.org/Features/FtpGateway
HTH,
Alex.
Received on Thu Apr 25 2013 - 14:16:48 MDT
This archive was generated by hypermail 2.2.0 : Thu Apr 25 2013 - 12:00:07 MDT