[Proftpd-user] Need help with MasqueradeAddress

Robert <[email protected]> Thu, 16 Dec 2021 19:06:09 -0500
Newsgroups gmane.network.proftpd.user
Message-ID <CALOL-CnTzFHkLsxp2=OOyM-0bjE6rXVNW0mFvEWcoWqUEbf-zg@mail.gmail.com>
Regarding a config entry like this...
MasqueradeAddress ftp.domainname.com

...does the server respond to PASV with the domain name (eg:
ftp.domainname.com) and expect the client to resolve the name to an IP or
does the server resolve the name first and only pass back the IP address?

My server is on a private-address network but is also accessible from the
public internet (via a NAT I think). Internal and external clients can
reach the server with the same hostname (eg: ftp.domainname.com) and
external and internal dns will resolve the same name to the correct
external or internal ip accordingly. The problem is for external users, the
server is responding with the internal IP for PASV.

I can use MasqueradeAddress to return the public IP to fix the issue
with external users, but then internal users are impacted. I was hoping
that if I specify the domain name in MasqueradeAddress, I can indirectly
make the server provide a different IP for external and internal users, but
this doesn't seem to be working.

This issue is side-stepped with a ftp client like Filezilla, which will
balk at the returned private ip and try the public ip instead. But I need
to make it work with Internet Explorer (oh yes), which is rather dumb.

I thought about using <VirtualHost> entries with different
MasqueradeAddress entries for internal and external connections each, but I
don't think that would work as internal and external clients are both using
the same hostname to reach the server.

On proftpd 1.3.6c.

Help?

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html