FTP through proxy

All,
Is it possible to use the SAP XI FTP adapter through an internet proxy? I don't find any configuration parameters to specify the ip-address and ftp-port.
Kind regards, Guy Crets

It seems impossible to specifiy the ip-address and port number of a proxy server. Only the ip adress and port number of the ftp server can be specified.
I want to connect with the FTP adapter to an FTP server somewhere on the Internet. To go out of our network on to the Internet, I need to go through a proxy.
Looking forward to your feedback/answers.
Regards, Guy Crets

Similar Messages

Can not connect to ftp through Proxy

So I am at work on my Mac and I've recently been set up on our proxy server. I have been able to connect to the internet though my browsers and mail (though it is noticeably slower). My problem as of now is that I cannot connect to an ftp server at all. I put the proper ip settings in the network settings... or at least my IT person says I did. When he tried to connect to the same FTP site on his PC, it worked without a problem, so my Mac won't even get to the proxy. What am I doing wrong? Any suggestions are appreciated.
Thanks,
Steve

In your Network System Preferences, under Advanced, Proxies tab, is Passive mode selected? If it is, try toggling it off then on (or try it with it off).
Also, have you contacted the Cyberduck people to ask if they know about a problem?
Have you tried connecting from Terminal?

ASA - cut through proxy authentication for RDP?

I know how to set this up on a router (dynamic access-list - lock and key)... But, I'm having trouble understanding how to setup OUTSIDE to INSIDE cut through proxy authentication for RDP.
OUTSIDE to INSIDE RDP is currently working.
I have 2 servers I want RDP open for..
[*]OUTSIDE 1.1.1.1 to INSIDE 10.10.70.100
[*]OUTSIDE 1.1.1.2 to INSIDE 10.10.50.200
What's required for OUTSIDE users to authenticate on the ASA before allowing port 3389 opens? I was hoping for is a way to SSH into this ASA, login with a special user, then have the ASA add a dynamic ACE on the OUTSISE interface to open 3389 for a designated time limit. Is this possible?
Here is my current config.
[code]
ASA Version 8.2(5)
hostname ASA5505
names
name 10.10.0.0 LANTraffic
name 10.10.30.0 SALES
name 10.10.40.0 FoodServices
name 10.10.99.0 Management
name 10.10.20.0 Office
name 10.10.80.0 Printshop
name 10.10.60.0 Regional
name 10.10.70.0 Servers
name 10.10.50.0 ShoreTel
name 10.10.100.0 Surveillance
name 10.10.90.0 Wireless
interface Ethernet0/0
description TO INTERNET
switchport access vlan 11
interface Ethernet0/1
description TO INSIDE 3560X
switchport access vlan 10
interface Ethernet0/2
shutdown
interface Ethernet0/3
shutdown
interface Ethernet0/4
shutdown
interface Ethernet0/5
shutdown
interface Ethernet0/6
shutdown
interface Ethernet0/7
shutdown
interface Vlan1
no nameif
security-level 50
no ip address
interface Vlan10
description Cisco 3560x
nameif INSIDE
security-level 100
ip address 10.10.1.1 255.255.255.252
interface Vlan11
description Internet Interface
nameif OUTSIDE
security-level 0
ip address 1.1.1.1 255.255.255.224
ftp mode passive
clock timezone PST -8
clock summer-time PDT recurring
dns domain-lookup OUTSIDE
dns server-group DefaultDNS
name-server 8.8.8.8
name-server 4.2.2.2
domain-name test.local
access-list RDP-INBOUND extended permit tcp any host 1.1.1.1 eq 3389
access-list RDP-INBOUND extended permit tcp any host 1.1.1.2 eq 3389
pager lines 24
logging enable
logging timestamp
logging trap warnings
logging device-id hostname
logging host INSIDE 10.10.70.100
mtu INSIDE 1500
mtu OUTSIDE 1500
ip verify reverse-path interface OUTSIDE
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-645.bin
no asdm history enable
arp timeout 14400
global (OUTSIDE) 1 interface
nat (INSIDE) 1 LANTraffic 255.255.0.0
static (INSIDE,OUTSIDE) tcp interface 3389 10.10.70.100 3389 netmask 255.255.255.255
static (INSIDE,OUTSIDE) tcp 1.1.1.2 3389 10.10.50.200 3389 netmask 255.255.255.255
access-group RDP-INBOUND in interface OUTSIDE
route OUTSIDE 0.0.0.0 0.0.0.0 1.1.1.1 1
route INSIDE LANTraffic 255.255.0.0 10.10.1.2 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
aaa authentication http console LOCAL
http server enable
http Management 255.255.255.0 INSIDE
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh 10.10.70.100 255.255.255.255 INSIDE
ssh Management 255.255.255.0 INSIDE
ssh 0.0.0.0 0.0.0.0 OUTSIDE
ssh timeout 5
ssh version 2
console timeout 0
threat-detection basic-threat
threat-detection scanning-threat shun
threat-detection statistics access-list
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
webvpn
username scott password CNjeKgq88PLZXETE encrypted privilege 15
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect ip-options
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:1e9d278ce656f22829809f4c46b04a07
: end
[/code]

You're running ASA 8.2(5). In 8.4(2) Cisco added support for what they call Identity Firewall rules. That is, you can make access-lists entries specific to users (or object groups containing users).
There's an overview document on this posted here. It's a bit dated but I believe the only change is that Cisco is now preferring use of the more current Context Directory Agent (CDA) - a free VM they provide - vs. the deprecated AD agent (software service that runs on your DC).

File size when doing ftp via proxy

Hi ALL,
I can not see file size when doing ftp download through proxy.
Why?

Welcome to the Apple Discussions.
There’s a second setting in the New Message Window in Mail that only appears if you have a JPEG attached:
Uploaded with plasq's Skitch!
Regards
TD

Software update through proxy

I am trying to update the LMS, but I am getting error through proxy server. I can do normal browsing through proxy without any problem. May I know the protocol and site that auto-update trying to access like https or ftp and cisco.com.
Thanks and Regards,
Ahmed Shahzad.

I can access the http://www.cisco.com or http://cco.cisco.com on the same subnet, but could not able to perform Auto-update on CS-MARS. I am getting the following error:
Unable to connect to the server, please check the URL, user name and password.
However the same URL with same UID and PWD is working from the destop on the same subnet. Rules on the proxy server is to allow the complete subnet on cisco.com at port 80.
Thanks and Regards,
Ahmed Shahzad.

Ftp via Proxy server

Is it just me or is documentation for FTP and all related thereto rather lacking and such that exists rather confusing?
Anyway, I have an FTP related question. I wish to connect to an FTP server. Trouble is that the internet connection goes through a proxy server.
Step 2 of connecting to the FTP server works when I connect to the proxy server myself first (open Internet explorer and type in the user and password) and then run the FTP connection program (uses Jakarta)
However, step 1 is proving problematic. Here is the code:
System.getProperties().put("ftp.proxySet","true");
     System.getProperties().put("ftp.proxyHost", "proxy.abc.def");
     System.getProperties().put("ftp.proxyPort", "80");
     System.getProperties().put("ftp.proxyUser", "auser");
     System.getProperties().put("ftp.proxyPassword", "apswd");
Then comes the code for part 2 - ie connect to ftp host -
connect("abcd.dfg.ert");
However, when I run the program and it comes to do the actual connection to the FTP host, part 2 above, I get "java.net.ConnectException: Connection timed out: connect".
Any suggestions as to what I am doing wrong would be greatly appreciated. I've been banging my head against the wall on this since the start of the week.

Just a further update on the above :
I saw some advice suggesting I need to connect to a SOCKS server as well. So I put the below code in place.
System.getProperties().put( "socksProxyPort", "80");
System.getProperties().put( "socksProxyHost" ,"proxy.abc.def");
However, this gave me the same error as above.
Then I heard that I need to authenticate myself to the SOCKS server.
So, here is what I wrote to do that:
Authenticator.setDefault(new Authenticator(){
protected PasswordAuthentication getPasswordAuthentication() {
return new PasswordAuthentication("auser", "apswd".toCharArray());
I used the same username and passwords as I had used for the ftp.proxyUser and ftp.proxyPassword, because I do not have any other passwords - perhaps this is the incorrect thing to do....?
Then, I got the following exception:
java.net.SocketException: Malformed reply from SOCKS server
Does that mean I am actually connected to the SOCKS server or not, I wonder. I read in a few places that some proxies use SOCKS and some don't. I don't know how to determine whether mine does or not. When I look at the properties of the proxy in Internet explorer, I notice that the SOCKS section is blanked out. I can fill it in myself, of course, but my program still has the same errors as above.

Can't access some secure sites through proxy?

can't access some secure sites through proxy server on osx it just keeps going local authority couldn't be contacted, i had the same problem with parental controls, but now that is off and its still doing it, is there a setting or something i need to enable?

In my original post, not today's, I had said I was having the issues on the Mini, running OSX 10.6.8 and Safari v.5.1.5 for my bank's pill pay. I should have been more specific as to which machine and OSX Safari browser I'm having the T-Mobile problem with. My mistake.
It is on both the MacMini and now the Air too. A moment ago, I was able to log in to my.t-mobile.com on the Air, but after putting into my Bookmarks folder, I can't do it anymore. The Log in button comes up greyed out instead of green.
I'm also still having trouble with my bank's bill pay section on both computers too.
I wonder if it's related to the saving of the log in info or putting in the Bookmark Folder?

ASA cut through proxy with RADIUS challenge response?

Have this working for IPSEC VPN on same box (tested on 8.2.1 and 8.2.3)
Want to do cut through proxy with challenge response - same ASA and same RADUIS server but using aaa authentication match command and this is what happens...
It looks like the ASA sends a completely different radius authentication request than with VPN authentication request. Is there any way to specify what request is sent?
What the RADIUS Server sees with ASA VPN auth - THIS WORKS OK (included for comparison)
Date: 15/11/2010
Time: 3:53:57 PM
Type: Information
Source: Server
Category: RADIUS
Code: I-006001
Description: A RADIUS Access-Request has been received.
AMID: 0xC8500B80B3D8F49C6CB37E5D32DA6682
Details:
Source Location : 10.xx.21.24
Client Location : 10.xx.21.230:1025
Request ID : 31
Password Protocol : PAP
Input Details : RADIUS Code:1, RADIUS Id:31, , User-Name:xxxx, User-Password:******, NAS-IP-Address:10.xx.21.230, NAS-Port:31, NAS-Port-Type:Virtual, vendor(9):attrib(1):0x1A2000000009011A69703A736F757263652D69703D31302E32312E352E313137, Calling-Station-Id:ip:source-ip=10.21.5.117
Action : Process
What the RADIUS Server sees with ASA cut thru - THIS FAILS (any help V welcome)
Date: 17/11/2010
Time: 2:29:31 PM
Type: Warning
Source: Server
Category: RADIUS
Code: W-006001
Description: An invalid RADIUS packet has been received.
AMID: 0xC19D988F83365F20151C3F6339DEC74B
Details:
Source Location : 10.xx.21.24:1812 (Authentication)
Client Location : 10.xx.21.230:1025
Reason : The sub-protocol of the received RADIUS packet cannot be determined
Request ID : 33
Input Details : 0x01210066055A8B6881266714BDB20380B9FE5FAC01066962333504060AC815E60506000000203D06000000051A2000000009011A69703A736F757263652D69703D31302E34302E352E3131311F1A69703A736F757263652D69703D31302E34302E352E313131
Request Type : Access-Request
Thanks in advance
IB

Hi Ian,
sorry for the late reaction - do you still need help with this?
The difference between the working (VPN) auth and the failing (CTP) auth seems to be that VPN is using PAP (so no challenge-response!) while the CTP is using MS-Chapv2
So my guess is that your Radius server does not support MS-Chapv2. If that is the case then you may want to try this:
aaa-server () host
no mschapv2-capable
Although this command is not really meant to be used in this scenario, so I'm not sure if it will work but I'm hoping it will make the ASA revert to PAP for all auth requests to this host.
Note that you won't be doing challenge/response, so your passwords will be transmitted over the wire (encrypted).
hth
Herbert

Re: (forte-users) HTTP request through proxy server

Daniel -
No, it does not. ;)
How do you say to HTTPRequest to go through proxy?
Thanks,
Taras
Daniel Nguyen wrote:
>
Hi,
It works very well. I have experienced this model for a distant Forte client
calling a Forte Server service Object for instance without any environment
and without TCP access (passing through firewall for instance).
It has also worked very well to make an injectot to improve Web Enterprise
and IIS using the SendRequest from HTTPAccess.
Hope this helps,
Daniel Nguyen
Freelance Forte Consultant
http://perso.club-internet.fr/dnguyen/
Taras Katkov a écrit:
HTTP request through proxy server using forte HTTP library?
Any experience?
Thanks,
Taras
For the archives, go to: http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. To unsubscribe, send in a new
email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.com--
For the archives, go to: http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. To unsubscribe, send in a new
email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.com

You can also use the HTTP-DC project.... You don't
need Web Enterprise for this. From what I can tell,
this is available in L.x on....
There is api documentation in M.2 (with scant
examples.)
There's a special process to put the project in your
repository (it isn't installed in the repository in
the standard install,) the documentation in M.2
(probably in M.0 too, AFAIK) that tells you how to do
this (look for HTTP-DC in the online help.)
I haven't done much with it yet, I've just installed
it. If anybody out there has examples, that'd be
great. I'll try to contribute more the moment I get a
chance to explore it....
Christopher Fury
BellSouth Communications Systems
--- Daniel Nguyen <dnguyenclub-internet.fr> wrote:
Hi,
If you have Web Enterprise, you can user
HttpAccess.SendRequest().
Hope this helps,
Daniel Nguyen
Freelance Forte Consultant
Amin, Kamran a écrit:
Is there any way to make a HTTP request from TOOLto another HTTP Service?
thanks in advance.
For the archives, go to:
http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. Tounsubscribe, send in a new
email the word: 'Unsubscribe' to:forte-users-requestlists.xpedior.com
For the archives, go to:
http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. To
unsubscribe, send in a new
email the word: 'Unsubscribe' to:
forte-users-requestlists.xpedior.com
Kick off your party with Yahoo! Invites.
http://invites.yahoo.com/

Getting through proxy servers

Hello,
Does anyone know if the URLRequest / Loader classes are able
to connect through proxy servers? In other words, does Flash read
the PC's proxy configuration and automatically use it?
Also, I was wondering, if one was to create a Socket and then
connect to a web site...
mySocket.connect("www.mydoman.com", 80);
but the user's PC uses a proxy server to connect to the
Internet, would this
connection succeed or fail?
Thanks for your insight.
Dan

Check the links below out. I think it may help you out some.
http://bugs.adobe.com/jira/browse/FP-519
http://bugs.adobe.com/jira/browse/FP-673

BPC Connection Through Proxy

Deal All,
We could not connect BPC through proxy server. Can anybody let me know any specific setting required.
Best Regards
Shesh

Sorin,
Thank you so much for the reply.
I think you are saying that when I connect that when I am connecting directly to BPCWEB it is saying knows you are authenticated to the windows domain. But when it gets it from the proxy server it is now not you anymore the BPCWEB server sees it coming from the proxy server NOT the windows domain.
So instead of DOMAIN/userID connecting it is PROXY/userID connecting. BPC doesn't know you. This cannot be the first time this has been seen.
Do you know a way around this? I am currently using sapwebdispatcher as my reverse proxy here, however I do not mind trying other products.
Would you have any recommendations on what your other clients use as a reverse proxy for BPC.
To simply things, we have DOMAIN users ---> Reverse proxy box ---> BPC Web .NET Server. We want to eliminte the ability for direct access to the BPC web .NET Server
Thanks again... any help would be great as we have been struggling for a few weeks to get this silly access issue resolved.
Edited by: Russell Hull on Feb 20, 2010 7:24 PM

ASA - Cut-through proxy probleme

I have to configure my ASA 7.2.2 for cut-through proxy but when the users use authentication prompt ,
but only , for (http://1.1.0.2/netaccess/connstatus.html) the ASA send the following message:
User Authentication
User Authentication is not required.
help me
it is ok when one uses cut-through-proxy by ACL :
access-list ACL_INT extended permit tcp object-group PC-UAUTH_DYN host MVINCT19 eq www
access-list ACL_AUTH line 1 extended permit tcp host poste_auvinet host MVINCT19 eq www
aaa-server auth_inside protocol radius
aaa-server auth_inside host SVR-ACS-IN
key xxx
username admin password xxx privilege 15
aaa authentication match ACL_AUTH inside auth_inside
aaa authentication listener http inside port www
on a pix 525 is OK

Hi,
The config looks good. Please remember that successful authentication is cached (show uauth) and till it expires user will not need to authenticate again.
Please clear uauth and see if it helps.
Regards,
Vivek

How to create pass-through-proxy?

How do I create some kind of pass-through proxy that can listen and receive OCI, and then forward the commands to the oracle database (sometimes where the SQL is slightly altered). What is the best way to do this?
I failed to find any relevant help in the docs. :-(
Thanks in advance!

Anyone? I guess what I'm looking for is how to receive instead of just sending OCI commands, and extract the SQL from the received OCI commands/packages for possible modification/refactoring.

OSB 11g with PASS-THROUGH PROXY

hello all,
I my designing on latest Fusion Middleware 11g Release 1 (11.1.1.5.0)
a http soap based osb proxy service wraped around owsm saml2.0- sender- vouches-message-protection service policy
a http soap based osb business service wrapped around owsm saml2.0- sender- vouches-message-protection client policy
a standalone client is calling this Passive Intermediary Proxy
In case of pass-through proxy service,
I would like to know that is it necessary that the policy contract between client --->proxy should be similar to proxy--->backend
I think so, because proxy is not atall touching the entire stuff starting from <soap:envelope>.........</soap:envelope>
So client-sent tokens etc. must match with what back end service requires.
In general, what am I buying by routing the client call through pass-through proxy service if the back-end webservice requires that entire message must by encrypted. In this case there is nothing open for the proxy to view and make any decisions based on that through its pipeline pairs etc.

Check out the following link...
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450b5e.html

Endpoint for FTP based proxy in Linux-urgent

Hi,
I have configured FTP based proxy. Both FTP server and ALSB are running on same machine. I have configured endpoint as ftp://<ip>:21/. FTP directory is /home/alsb
I have also mentioned error,archive and download dirs in /home/Dir/download ,/home/Dir/error,/home/Dir/archive.
Inspite of this the proxy is not polling fo messages from FTP server. The name of the file changes to <filename>.stage but nothing happens after that.
The other alternative config done was to enable remote streaming.In this case,the file polls but it moves to error dir.None of the alerts configured in proxy are executed.
Can anyone tell me where the problem is?
Thanks.
Arti

Hi,
I didn't find any error in OSB logs.This was the msg in the log:
####<Aug 6, 2009 5:54:10 PM EDT> <Info> <WliSbTransports> <DIA2-RH52> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <> <> <1249595650028> <BEA-381113> <File ./CntctOpt_data.txt renamed to CntctOpt_data.txt__5970064165513615536--40acb272.122ebdf8770.-109a.Stage on the remote host 192.168.14.126 for the service endpoint ProxyService$3sixty$proxy$contact$inbound$DummyProxy>
Also found this :
javax.jms.JMSException: [JMSPool:169803]JNDI lookup of the JMS connection factory weblogic.wlsb.jms.transporttask.QueueConnectionFactory failed: javax.naming.NameNotFoundException: While trying to lookup 'weblogic.wlsb.jms.transporttask.QueueConnectionFactory' didn't find subcontext 'wlsb'. Resolved 'weblogic'; remaining name 'wlsb/jms/transporttask/QueueConnectionFactory'
Resolved 'weblogic'; remaining name 'wlsb/jms/transporttask/QueueConnectionFactory'
     at weblogic.deployment.jms.JMSExceptions.getJMSException(JMSExceptions.java:29)
     at weblogic.deployment.jms.JMSConnectionHelper.lookupConnectionFactory(JMSConnectionHelper.java:471)
     at weblogic.deployment.jms.JMSConnectionHelper.openConnection(JMSConnectionHelper.java:268)
     at weblogic.deployment.jms.JMSConnectionHelper.<init>(JMSConnectionHelper.java:184)
     at weblogic.deployment.jms.JMSSessionPool.getConnectionHelper(JMSSessionPool.java:469)
     at weblogic.deployment.jms.PooledConnectionFactory.createConnectionInternal(PooledConnectionFactory.java:332)
     at weblogic.deployment.jms.PooledConnectionFactory.createConnection(PooledConnectionFactory.java:226)
     at com.bea.wli.sb.security.SecurityModuleImpl$5.run(SecurityModuleImpl.java:521)
     at com.bea.wli.sb.security.SecurityModuleImpl$5.run(SecurityModuleImpl.java:520)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
     at weblogic.security.service.SecurityManager.runAs(Unknown Source)
     at com.bea.wli.sb.security.SecurityModuleImpl.runAlsbPrivilegedAction(SecurityModuleImpl.java:376)
     at com.bea.wli.sb.security.SecurityModuleImpl.createJmsConnection(SecurityModuleImpl.java:524)
     at com.bea.wli.sb.transports.poller.PollEngine.sendMessage(PollEngine.java:133)
     at com.bea.wli.sb.transports.poller.PollEngine.putMessageInQueue(PollEngine.java:108)
     at com.bea.wli.sb.transports.poller.TransportTimerListener.timerExpired(TransportTimerListener.java:79)
     at weblogic.timers.internal.TimerImpl.run(TimerImpl.java:273)
     at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:464)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:200)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:172)
I am using a different connection factory.Not sure why this error is being encountered.
Edited by: arrajago on Aug 7, 2009 2:04 AM

FTP through proxy

Similar Messages

Maybe you are looking for