Article delegate-en/2111 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A2109@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: FTP TLS Proxy Problem
06 Feb 2003 04:20:46 GMT feedback@delegate.org (Yutaka Sato)


In message <_A2109@delegate-en.ML_> on 02/06/03(11:01:08)
you "Bryan Dees" <phueabdyi-6cvkctgpsbnr.ml@ml.delegate.org> wrote:
 |Hello, i'm trying to proxy FTP TLS/SSL through Delegate 8.3.3 using the
 |following script and was hoping you could tell me why it hangs right
 |after I receive: '234 AUTH TLS-C/TLS OK' while attempting my connection.

This response seems to be generated by the target server, that is
the server seems to be supporting FTP/TLS, is it so?  Then what
is the purpose of your  proxy FTP TLS?

 |# Proxy Connect:Enterprise SSL FTP
 |$DGROOT/src/delegated \
 |  -P21 \
 |  -v \
 |  PERMIT="*:*:*" \
 |  REACHABLE="*" \
 |  RELAY=proxy,delegate \
 |  SERVER=ftp://$FTPSVR/  \
 |  CMAP="sslway -st:FCL:ftp:*:*" CMAP="sslway -ad:FCL:ftp-data:*:*"
 |
 |Verbose output from the server: 
...
 |02/05 17:58:46.55 [503] 0+0: env[2] DGROOT=/usr/local/delegate8.3.3
 |02/05 17:58:46.55 [503] 0+0: env[3] ADMIN=root@localhost
 |02/05 17:58:46.55 [503] 0+0: env[12]
 |LIBPATH=/usr/local/delegate8.3.3/lib
 |02/05 17:58:46.56 [503] 0+0: env[27] RESOLV=cache,file,dns
 |02/05 17:58:46.56 [503] 0+0: arg[3] PERMIT=*:*:*
 |02/05 17:58:46.56 [503] 0+0: arg[4] REACHABLE=*
 |02/05 17:58:46.56 [503] 0+0: arg[5] RELAY=proxy,delegate
 |02/05 17:58:46.56 [503] 0+0: arg[6] SERVER=ftp://156.137.50.50:21/
 |02/05 17:58:46.56 [503] 0+0: DELEGATE_Modified[0]: 3e41b317
 |02/05 17:58:46.56 [503] 0+0: --INITIALIZATION DONE--

Your log shows that CMAP parameters are not passed to your DeleGate.
If the DeleGate got them, then the log data must have contained lines
like follows:

 |02/05 17:58:46.56 [503] 0+0: arg[7] CMAP=sslway -st:FCL:ftp:*:*
 |02/05 17:58:46.56 [503] 0+0: arg[8] CMAP=sslway -ad:FCL:ftp-data:*:*

Cheers,
Yutaka
--
  @ @ Yutaka Sato <y.sato@delegate.org> http://www.delegate.org/y.sato/
 ( - ) National Institute of Advanced Industrial Science and Technology (AIST)
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V