filter for "FTP proxy service" ?

[tecxx]

Hello,
i understand that "Web Access Control - Access Rules" allow us to set access rules for the www proxy server (black/whitelists, ip based rules, etc)

i have also activated the "FTP Proxy Service", but it seems the already mentioned rules don't apply here. so basically everyone can access the ftp proxy service without restrictions. is this correct or am i missing something?
thanks,
br
Robert

[adrien]

Hi

web access control rules are for web access only (unless the client is using a web browser for FTP, in which case it still goes through the WWW proxy).

For other protocols, there's the policy system.

Regards

Adrien

[tecxx]

Whow... that brings everything to a whole new level.
thanks :) editing workflow now....

[tecxx]

i need a helpful hand one more time.
as mentioned before, i am trying to put authentication on the FTP proxy service.

i created a test policy for the FTP Proxy Service: ClientConnect event.
i connected it to a user/group check event, and two result objects allow/disconnect based on user group membership.

so far so good - the event seems to get called as i see the hit counter go up.
unfortunately all calls follow the "disconnect" path, in other words, user authentication does not work.

i am using filezilla and tried all available ftp proxy settings: user@host, site, open

any pointers?


EDIT: i think that when the ClientConnect event triggers, the filezilla client did not yet send any authentification information.
so i could authenticate via ip lookup lists at this stage. but if i am trying to authenticate via user/pass then i would need an additional event trigger, that fires once the client has sent authentication information. correct?

[adrien]

HI

I sent you a link to a new build which contains a few more FTP features, including auth to the proxy, and another event.

Regards

Adrien

[tecxx]

the ftp proxy auth is really working great with filezilla.
thanks a lot!