Can not get access to FTP site from behind Firewall

Report client bugs
Post Reply
cam2005
Posts: 2
Joined: Mon Jan 31, 2005 3:08 pm

Can not get access to FTP site from behind Firewall

Post by cam2005 »

When I attempt to access my ftp site it uses the user name for the ftp site instead of the id and password for my proxy. Any ideas how to get the proxy to authenticate over the firewall before the user name and password for the ftp site are used.

I was able to get this working with WS_FTP using the same settings. I am pretty frustrated. Thanks for any help that you can give me.
cam2005
Posts: 2
Joined: Mon Jan 31, 2005 3:08 pm

Post by cam2005 »

Here is what I did:

I emtied the username and password field for the ftp server I was connecting to. I said to use a proxy. Even though I had the information under the advanced tab it still prompted me for user ID and Password thinking it was for the ftp site.

I also put to post commands in and entered USER xxxx PASS xxxx. This logged me into the site and was able to transfer files. I have no idea why my proxy infomation would not run. Any time I had ID and password in the ftp site screen it would use that for my firewall. Now it prompts I enter my id then use the post commands to access the ftp site.

Thanks for your quick response.
bazkar
Posts: 16
Joined: Mon Oct 10, 2005 1:21 pm

Post by bazkar »

I seem to have the same problem as cam2005.

I'm connecting to a common ftp site, for instance:
ftp.sunet.se
The logon credentials for that site are anonymous and use proxy is checked black:
Image

As my proxy I'm using a internal transparent proxy on port 21 which does need login credentials:

Image

I have filled in the correct login credentials for my proxy, but when I try to connect to ftp.sunet.se, coreftp tries to log on to my proxy with the anonymous credentials provided in the first screenshot instead of the credentials provided on the proxy page in the second screenshot. Furthermore, the user is passed to the server before it is prompted.

Image

I have tested this in reflection with the exact same settings and there it works flawlessly.
Basically what I need coreFTP to do is copy the command line ftp procedure, which is:
Connect to the proxy.
Wait for user prompt (after the welcome msg of the proxy).
Give a user reply for the proxy
Give a password reply for the proxy
After succesfull logon to the proxy:
Give a user and password reply for the site.

What am I or what is coreftp doing wrong?

On a side note, a login and password prompt (popup screen) for proxy connection would be much appreciated, since multiple users might use the same machine. This is supplied for site connection, but not for proxy connection credentials.
bazkar
Posts: 16
Joined: Mon Oct 10, 2005 1:21 pm

Post by bazkar »

For further information:

The workaround cam2005 provided above:

Leaving the login credentials for the site blank and using the prompt that appears at connection to enter proxy credentials, also does not work for me, since the credentials are passed to the proxy, before the proxy asks for them (a welcome message appears first).

As a final screenshot, I have pasted the commandprompt login procedure:


Image
jeffd
Posts: 113
Joined: Thu May 06, 2004 6:12 am

Post by jeffd »

Did you try the 'UserId = user@hostname' proxy type under ftp proxy type...? It looks like this is what the server is requesting. The transparent option doesn't look like it will work in this scenario.
bazkar
Posts: 16
Joined: Mon Oct 10, 2005 1:21 pm

Post by bazkar »

If I enter a user@hostname as FTP proxy, the following happens:

If I supplied credentials for the ftp server (ftp.sunet.se) it tries to use these credentials to log on to the proxy and thus fails.
If I do not supply credentials for the ftp server, it tries to use a blank user name and the ftp server to log on to the proxy: @ftp.sunet.se and thus fails. Why the login and password supplied in the proxy page are not used is not clear.

What does allow me to log on to the proxy is to define the FTP proxy type as: USER after logon. This gives me a prompt to enter user credentials (which coreftp thinks are for the site you connect to). If I enter my proxy-credentials there however, the client authorises to the proxy, but then I still have to connect to the ftp server... CoreFTP does not provide a means of doing so, since it thinks it is already connected to that server.

Why the credentials provided as the proxy credentials in the 2nd screenshot above are completely ignored is only a guess... What I think is the problem, is that the proxy credentials are passed to the proxy at logon and not after logon. Since the credentials are needed AFTER logging on to the proxy, the program thinks it has already passed authentication to the proxy and tries to insert the credentials of the site (ftp.sunet.se in this case) to which one tried to connect in the first place. Since the proxy does not know these credentials, logon fails.

When ftp proxy type is set to: 'USER after logon', this means that CoreFTP will provide a logon prompt, after logging on to the proxy. What coreftp does not know is that it still needs to authenticate to that proxy before it can use the username and password provided for the site.
Post Reply