<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Arial Narrow";
panose-1:2 11 6 6 2 2 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EstiloCorreo18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EstiloCorreo19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ES link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Good morning squid users,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’m facing a weird situation in my Company… let me explain:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I installed squid(3.5.20) on CentOS 7 minimal to perform as an ftp-proxy. <o:p></o:p></p><p class=MsoNormal>My configuration file looks like this:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>/etc/squid/squid.conf<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>##############################################################################<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl SSL_ports port 443 21<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>ftp_port 21<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>ftp_passive off<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>##############################################################################<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 80 # http<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 443 # https<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 70 # gopher<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 21<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 210 # wais<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 1025-65535 # unregistered ports<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 280 # http-mgmt<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 488 # gss-http<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 591 # filemaker<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl Safe_ports port 777 # multiling http<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl CONNECT method CONNECT<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>##############################################################################<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>acl FTP proto FTP<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>always_direct allow FTP<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>##############################################################################<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_access allow CONNECT SSL_ports<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_access allow CONNECT Safe_ports<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_access allow SSL_ports<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_access allow Safe_ports<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_access allow all<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_access allow FTP<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>##############################################################################<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>http_port 3128<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>refresh_pattern ^ftp: 1440 20% 10080<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>refresh_pattern ^gopher: 1440 0% 1440<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>refresh_pattern -i (/cgi-bin/|\?) 0 0% 0<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>refresh_pattern . 0 20% 4320<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:9.0pt;font-family:"Arial Narrow",sans-serif'>##############################################################################<o:p></o:p></span></i></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The thing is that the parameter “ftp_passive off” seems not to be working… <o:p></o:p></p><p class=MsoNormal>Due to security measures we have to use non-passive mode to be able to transfer anything.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The connection works fine with the remote hosts, the login works, but I have to enter “passive” every single time to swap the mode to non-passive. <o:p></o:p></p><p class=MsoNormal>I don’t know whether the “ftp_passive” is not working or I need to do something else.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>After doing a deep research I cannot find much information related with this kind of problems, so I decided to get in touch with you. Please help!!<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks in advance.<o:p></o:p></p><p class=MsoNormal>Regards<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>