Re: [squid-users] Access Lists and FTP

On Mon, 30 Aug 2010 12:28:06 +0930, "Greg Darby"
<greg.darby_at_ramelec.com.au> wrote:
> Hi,
>
> I am running Squid and a business decision was to deny access to FTP
(Port
> 21) hence it is not in the safe port list. We now have a supplier that
> wishes for us to use FTP to download price lists etc however i have not
> been
> able to get Squid to allow the FTP traffic using ACL's without adding
the
> FTP port to the safe list.
>
> What i would like to ask is if there is a way to configure Squid to
allow
> outbound FTP connection to a single destination host only from a range
of
> source IP'sinside our network?

Add it back to the Safe_ports list and add extra ACLs to control where is
accessible to:

acl FTP proto FTP
acl supplier dstdomain example.com

http_access allow FTP supplier
http_access deny FTP

Amos
Received on Mon Aug 30 2010 - 04:23:03 MDT