[squid-users] FTP proxy

[Alex Rousskov]

On 12/8/20 2:50 AM, Andrea Venturoli wrote:
> On 12/7/20 4:08 PM, Alex Rousskov wrote:
>> When handling a PASV command, Squid creates a listening socket bound to
>> an ephemeral TCP port selected by the operating system. Ephemeral port
>> ranges are usually handled by your OS ephemeral ports setting (e.g.,
>> sysctl net.ipv4.ip_local_port_range).

> For the record, since I'm not using Linux, but FreeBSD, I guess that
> would be net.inet.ip.portrange.first/net.inet.ip.portrange.last (or,
> possibly, net.inet.ip.portrange.hifirst/net.inet.ip.portrange.hilast,
> I'd have to check the source).

> However those are system wide settings; I guess there is no equivalent
> of frox.conf's "PassivePorts" settings, then.

Correct. Squid just bind(2)s the listening socket to port zero.

Alex.