SQUID proxy - open FTP (and other ports)
- by gaffcz
elpeHow can I open other ports than HTTP and HTTPS using SQUID proxy?
I have last version of squid running on Fedora 10 but I'm not able to open FTP port.
part of my squid.conf:
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl ftp proto FTP
acl ftp_port port 21
always_direct allow FTP
acl SSL_ports port 443 20 21 22
acl Safe_ports port 20 # ftp
acl Safe_ports port 21 # ftp
acl Safe_ports port 22 # sftp
acl Safe_ports port 80 # http
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # https
acl Safe_ports port 1025-65535 # uregistred ports
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
# USER privilegies (encoded in file passwd)
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
acl AUTHUSERS proxy_auth REQUIRED
# BLACKLIST (in file denied.conf)
acl denied_domains dstdomain "/etc/squid/DNDdomains.conf"
acl denied_regex url_regex "/etc/squid/DNDregex.conf"
http_access deny denied_regex
http_access deny denied_domains
http_access allow AUTHUSERS
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow ftp_port CONNECT
http_access allow ftp
http_access allow localhost
http_access deny all
#http_reply_access allow all
#http_access allow all
http_port 3128
hierarchy_stoplist cgi-bin ?
cache_dir ufs /var/spool/squid 10000 16 256
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
I've tried to add:
acl ftp proto FTP / acl ftp_port port 21
http_access allow ftp
add/remove ports 20,21 from SSL_PORTS list
set the iptables
But nothing helped. It is even possible to use a new version of squid for FTP transfer?
