CLI man page:
safesquid-ftp(5)safesquid-ftp(5)) configures global FTP-over-HTTP gateway behaviour. There is no policy list — only global fields.
Core mechanics
Anonymous credentials
When the client sends no username, SafeSquid substitutes Username and Password from this section before USER/PASS.Passive mode
When on, PASV data connections; when off, PORT/active with local bind on the same interface as the control connection.Sort defaults
Directory HTML listings use Sort field and Sort order when the client does not pass CGI sort parameters.FTP login path
Global fields
- Passive mode — PASV vs PORT data transfer.
- Timeout — Control read timeout; 0 uses OS TCP keepalive interval.
- Username / Password — Anonymous defaults when client omits credentials.
- Sort order / Sort field — Default directory listing order (name, size, date).
Examples
How to verify
- Open
ftp://URL through proxy in browser. - Toggle passive if LIST works but RETR fails.
- Check Detailed logs and REQUEST native logs.

