Squid and FTP issue

[Number6]

We have had a Dansguardian / Squid proxy box running for a couple of weeks now and all was well. DG is using the NTLM Auth protocol which transparently authenticates all user requests via the user's network credentials. It's all running silky smooth, or was....

 

FTP requests via a browser seem to be a problem. I may be wrong but Squid appears to treat all FTP requests as requiring anonymous login and does not give the user the option of entering credentials.

 

I've had a look at squid.conf and can't see any option to prevent squid from doing this. There is an option to modify the "email address" that squid transmits as part of the anonymous login procedure but nothing that tells squid to fetch an FTP site using normal [username / password] login.

 

Entering ftp://[username: password]@{ftp site address} into the browser address bar makes no difference, the returned error message makes it clear that squid is still insisting on applying anonymous login.

 

The ftp site can be accessed OK via Filezilla, it's just browser requests that are the problem.

 

Has anyone else dealt with this issue? If so how?

[Number6]

Update:

 

Using Firefox pops up the username and password entry dialogue.

 

Using IE does not and gives the error.

[tom_newton]

I think that may be "just the way it is" for IE. We use a "proper" ftp proxy (frox). That seems to work, but we don't ftp in IE.

[Number6]

I was thinking of installing Frox to handle ftp calls.

 

It's a weird one with IE. All other browsers seem to pop the credentials dialogue but not IE.

 

We only have to one user who insists on using IE to ftp into a onelan box to manage our digital signage. I've installed filezilla for him but he still defaults to IE. Hey-ho!

[tom_newton]

It's not too hard to install frox IIRC. Can probably find someone to give you a spot of advice, too.