[squid-users] Squid 3.5.21: ftp_port intercept doesn't work

[oleg gv]

Hello

I've setup in Squid 3.5.21 on my gateway : ftp_port 10.0.0.1:2121 intercept
and create nat rule to redirect from port 21 to 2121 for client source
address (for example 10.0.0.10)

Then trying to go through browser to ftp://ftp.intel.com from client
10.0.0.10

And in browser got Password prompt window: i set user anonymous and
password a at a

Then got error message 501 Missing Host.

In squid log I see:

2016/10/03 15:34:24.504 kid1| 20,2| store.cc(949) checkCachable:
StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:24.508 kid1| 33,2| client_side.cc(816) swanSong: local=
10.0.0.1:2121 remote=10.0.0.10:37016 flags=1
2016/10/03 15:34:24.508 kid1| 5,2| TcpAcceptor.cc(220) doAccept: New
connection on FD 10
2016/10/03 15:34:24.508 kid1| 5,2| TcpAcceptor.cc(295) acceptNext:
connection on local=0.0.0.0:2121 remote=[::] FD 10 flags=9
2016/10/03 15:34:29.534 kid1| 33,2| FtpServer.cc(699) parseOneRequest:
>>ftp USER anonymous
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable:
StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable:
StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable:
StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.534 kid1| 88,2| client_side_reply.cc(2005)
processReplyAccessResult: The reply for NONE error:ftp-missing-host is
ALLOWED, because it matched NO ACL's
2016/10/03 15:34:29.534 kid1| 9,2| FtpServer.cc(1208)
writeForwardedReplyAndCall: FTP Client local=10.0.0.254:2121 remote=
10.0.0.10:37018 FD 13 flags=1
2016/10/03 15:34:29.534 kid1| 9,2| FtpServer.cc(1210)
writeForwardedReplyAndCall: FTP Client REPLY:
---------
501 Missing host

----------
2016/10/03 15:34:29.534 kid1| 20,2| store.cc(949) checkCachable:
StoreEntry::checkCachable: NO: not cachable
2016/10/03 15:34:29.574 kid1| 33,2| client_side.cc(816) swanSong: local=
10.0.0.1:2121 remote=10.0.0.10:37018 flags=1


Though I can not use native ftp relay to go to ftp servers.

Please, could you help ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20161003/319f49d2/attachment.html>