<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I have searched in maillist archives but have not seen so far someone with the<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">same problem.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">My Squid's objective is to foward FTP & HTTP requests to a distant server.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Squid is running on CentOS 7.2.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">uname -r : 3.10.0-327.28.3.el7.x86_64<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">squid -v : Version 3.5.20<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I don't have the choice to use anything but Squid, and I can't use firewalling<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">rules for forwarding directly ports.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">WAN_1stPublic_IP ----------------------------[FIREWALL_1] -----[FTP_SERVER]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">WAN_2ndPublic_IP ---[FIREWALL_2]--[SQUID]-----[VPN]-----[FTP_SERVER]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Here's my problem :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">When I'm connecting in FTP on the 2nd Public IP, everything is ok, but when I<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">want to switch to passive mode, Squid is sending his own private ip instead of<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">the 2nd public IP. So the connexion timed out.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">ftp> open <WAN 2ndPublic IP><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Connected to <WAN 2ndPublic IP> (<WAN 2ndPublic IP>).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">220 Service ready<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Name (<WAN 2ndPublic IP>:<user>): <login><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">---> USER <login><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">331 Please specify the password.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Password:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">---> PASS XXXX<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">230 Login successful.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">---> SYST<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">215 UNIX Type: L8<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Remote system type is UNIX.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Using binary mode to transfer files.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">ftp> pwd<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">---> PWD<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">257 "/"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">ftp> ls<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">---> PASV<o:p></o:p></span></p>
<p class="MsoNormal">227 Entering Passive Mode (<SQUID Private IP>,<port>).<o:p></o:p></p>
<p class="MsoNormal">ftp: connect: Connexion terminée par expiration du délai d'attente<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Is there a way to "force" Squid to resend his public IP ?
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I'm thinking of something like "pasv_address" option in vsftpd, but for squid.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Gaël Ancelin<o:p></o:p></span></p>
</div>
</body>
</html>