[lug] Making an HTTPS tunnel to an FTP server

Glenn Murray glenn.murray at gmail.com
Fri Dec 23 20:20:03 MST 2011


Thanks, Chris this is a good idea.  Unfortunately mod_proxy_ftp is
one-way only, and the wrong way for me.

Merry Xmas!
Glenn


On Fri, Dec 23, 2011 at 1:54 PM, Chris McDermott <csmcdermott at gmail.com> wrote:
> I think you should look at Apache mod_proxy and mod_proxy_ftp modules. You
> could set up an Apache server listening on 443 (HTTPS), which would then
> proxy the requests to an FTP backend. If you actually care about security
> inside the backend network, you could even use stunnel or something to
> encrypt the communications between Apache and your FTP server.
>
> https://httpd.apache.org/docs/2.2/mod/mod_proxy.html
> https://httpd.apache.org/docs/2.2/mod/mod_proxy_ftp.html
>
> Once you have Apache configured, I think the configuration would be
> something relatively simple like:
>
> ProxyPass / ftp://ftp.server.net
>
>
> Chris
>
> On Tue, Dec 20, 2011 at 12:13 PM, Glenn Murray <glenn.murray at gmail.com>
> wrote:
>>
>> Hi,
>>
>> I was wondering if someone on this list had any experience with this
>> problem.  I have a ProFTPD server running on port 21 behind a
>> firewall.  I'm like to create an HTTPS tunnel through the firewall to
>> ProFTPD so that users outside the firewall can connect to ProFTPD
>> using the same ProFTPD credentials as inside the firewall.  I
>> understand that another set of credentials is necessary to set up the
>> tunnel.  The odd thing here is that (at this point) it has to be
>> HTTPS, and not FTPS, SFTP, etc.
>>
>> Thanks,
>> Glenn
>>
>> _______________________________________________
>> Web Page:  http://lug.boulder.co.us
>> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety
>
>
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety



More information about the LUG mailing list