3 Replies Latest reply on Sep 5, 2012 3:43 AM by asabban

    FilleZilla through McAfee Web Gateway (Webwasher)

      Hello Community,

       

      i have a question, can someone tell how i have to set the configuration of Filezilla to connect an FTP site through an McAfee Web Gateway (Webwasher) ? or witch settings are important McAfee Web Gateway (Webwasher) ?

       

       

      On filezilla i set :

       

      Ftp Proxy: User@host

       

      Proxyhost: 10.10.10.1:2121

      Proxy user: Domain User

      Proxy Passwort: passwort

       

      I getting the error :

       

      Status:    Using proxy 10.10.10.1:2121

      Status:    Connecting to 10.10.10.1:2121...

      Status:    Connection established, waiting for welcome message...

      Response:    220 McAfee Web Gateway FTP Proxy 6.9.0 build 11735

      Command:    USER Domainuser

      Response:    331 User name okay, need password.

      Command:    PASS ***********

      Response:    230-McAfee Web Gateway Authentication successful.

      Response:    230 Use SITE command or another USER/PASS sequence.

      Command:    USER user@ftp01.site.com

      Response:    331 User name okay, need password.

      Command:    PASS ********

      Response:    421 Remote server went down.

      Error:    Could not connect to server

        • 1. Re: FilleZilla through McAfee Web Gateway (Webwasher)
          asabban

          Hello,

           

          the configuration looks fine for me. Authentication is accepted but when you try to hop to the remote server there seems to be a problem. Are you sure that MWG is allowed to connect to the destination server? I would try to create a tcpdump to see what happens on the wire and check why the connection to the FTP server fails.

           

          Best,

          Andre

          • 2. Re: FilleZilla through McAfee Web Gateway (Webwasher)

            Hello asabban,

             

            what do you mean with tcpdump ? how do i create that.

             

            Where i have to allow the destination Server ?

             

            regards

            • 3. Re: FilleZilla through McAfee Web Gateway (Webwasher)
              asabban

              Hello,

               

              on MWG there is not need to allow destination servers, but firewalls often drop/restrict FTP communications to active/passive modes or similar. A tcpdump aka packet capture writes down everything that goes on on the network and allows to better understand what fails when MWG tries to connect to the remote FTP server.

               

              You can create it after logging in to the system via SSH by running something like

               

              tcpdump -i any -s 0 -w /tmp/trace.pcap (See KB73781)

               

              On Windows you can use wireshark to create a dump.

               

              Both will write down all packets that go through MWG, so you should always run it for only a short time, e.g.

               

              - Run it

              - Replicate problem

              - Stop it

               

              I recomment to contact technical support in case you don´t know how to create/read/understand the capture files.

               

              Best,

              Andre

               

              Nachricht geändert durch asabban on 05.09.12 10:43:01 MESZ