Hello,

We have a problem with the transparent FTP proxy on Astaro 7.503.

When this message appears in logs (not everytime), the file uploaded is corrupted (some bytes are missing).

FTP proxy is configured to allow everybody on LAN to ANY server.
There is no intrusion detection in logs.
We are using multipath rule to redirect FTP Proxy traffic to one interface. On this interface, we have a secondary ip address with a DNAT rule to let FTP traffic coming in on an internal FTP server.
Maquerading is configured on Uplink Interfaces.

As we can't find any message about this problem, we suspect having a strange network configuration problem (probably related to DNAT/FTP interception).

For now, we disabled the FTP proxy and let the FTP traffic goes out. But we need to change the default gateway to let the ftp data go to the right interface (multipath rule doesn't seem to handle ftp data coming from LAN).

Does somebody have an idea?

Thanks in advance,

Nicolas

A thread in the German Forum seems to indicate the issue is a client setting. User mlucky presented the following solution for Filezilla:

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!

We had this issue when trying to use Internet Explorer for FTP with the HTTP/S proxy enabled.

We found 2 resolutions:

Astaro side: in the Web Security -> HTTP/S -> Exceptions adding the domain and removing authentication/caching/url filter/content filter.

Client side: Use a dedicated FTP program or install a FTP add-on to Firefox.