Re: [squid-users] Access Lists and FTP

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Mon, 30 Aug 2010 04:21:19 +0000

On Mon, 30 Aug 2010 12:28:06 +0930, "Greg Darby"
<greg.darby_at_ramelec.com.au> wrote:
> Hi,
>
> I am running Squid and a business decision was to deny access to FTP
(Port
> 21) hence it is not in the safe port list. We now have a supplier that
> wishes for us to use FTP to download price lists etc however i have not
> been
> able to get Squid to allow the FTP traffic using ACL's without adding
the
> FTP port to the safe list.
>
> What i would like to ask is if there is a way to configure Squid to
allow
> outbound FTP connection to a single destination host only from a range
of
> source IP'sinside our network?

Add it back to the Safe_ports list and add extra ACLs to control where is
accessible to:

acl FTP proto FTP
acl supplier dstdomain example.com

http_access allow FTP supplier
http_access deny FTP

Amos
Received on Mon Aug 30 2010 - 04:23:03 MDT

This archive was generated by hypermail 2.2.0 : Mon Aug 30 2010 - 12:00:03 MDT