Skip to main content
CLI man page: safesquid-ftp(5)
The FTP section (safesquid-ftp(5)) configures global FTP-over-HTTP gateway behaviour. There is no policy list — only global fields.

Core mechanics

Anonymous credentials

When the client sends no username, SafeSquid substitutes Username and Password from this section before USER/PASS.

Passive mode

When on, PASV data connections; when off, PORT/active with local bind on the same interface as the control connection.

Sort defaults

Directory HTML listings use Sort field and Sort order when the client does not pass CGI sort parameters.
FTP protocol flow

FTP login path

Global fields

  • Passive mode — PASV vs PORT data transfer.
  • Timeout — Control read timeout; 0 uses OS TCP keepalive interval.
  • Username / Password — Anonymous defaults when client omits credentials.
  • Sort order / Sort field — Default directory listing order (name, size, date).

Examples

Anonymous behind firewall

Config: passive on, anonlogin anonymous.Result: PASV data channel; listing and download without client credentials.

Access denies FTP

Config: FTP globals normal; Access lacks proxy/FTP for client.Result: Denied before FTP settings apply.

How to verify

  1. Open ftp:// URL through proxy in browser.
  2. Toggle passive if LIST works but RETR fails.
  3. Check Detailed logs and REQUEST native logs.