Re: command line ftp behind firewall

[Shaul Karl <shaulk@israsrv.net.il>]

> I was finally able to get netscape to work on my linux
> box behind the corporate firewall by setting the
> manual proxy to 10.xxx.xxx.xxx:80 for http and ftp (I
> actually gave the REAL address).  I could not just
> give the URL address as the machine still doesn't seem
> to co-exist with the windows network nameserver even
> though the hard addresses of the name servers were
> entered into /etc/resolv.conf
> 
> Now how do I configure command line ftp to access via
> the firewall's port 80 as I have just done for
> Netscape-naviagator?  (Once I can do that I can
> finally use apt-get directly on this machine, instead
> of downloading the packages one by one).
> 

I am not sure you need to configure command line ftp in order to use apt-get.
I am behind a firewall as well. My current /etc/apt/apt.conf is:

[22:27:03 /tmp]$ cat /etc/apt/apt.conf
/* In some instances involving filenames it is possible to set the default
   directory when the path is evaluated. This means you can use relative
   paths within the sub scope.
   
   The configuration directives are specified in a tree with {} designating
   a subscope relative to the tag before the {}. You can further specify
   a subscope using scope notation eg,
     APT::Architecture "i386";
   This is prefixed with the current scope. Scope notation must be used
   if an option is specified on the command line with -o.
*/

// Options for the downloading routines
Acquire
{
  // HTTP method configuration
  http 
  {
    Proxy "http://Proxy.israsrv.net.il:8080";;
    Timeout "120";
  };

  // FTP method configuration
  ftp
  {
    Proxy "ftp://Proxy.israsrv.net.il:8080";;

    /* Required script to perform proxy login. This example should work
       for tisfwtk */
    ProxyLogin
    {
       "USER $(PROXY_USER)";
       "PASS $(PROXY_PASS)";
       "USER $(SITE_USER)@$(SITE):$(SITE_PORT)";
       "PASS $(SITE_PASS)";
    };
    
    Timeout "120";
    
    /* Passive mode control, proxy, non-proxy and per-host. Pasv mode
       is prefered if possible */
    Passive "true";
  };
  
};

DPkg 
{
   // Auto re-mounting of a readonly /usr
   Pre-Invoke {"mount -o remount,rw /usr";};
   Post-Invoke {"mount -o remount,ro /usr";};
   
}
// Pre-configure all packages before they are installed.
// (Automatically added by debconf.)
DPkg::Pre-Install-Pkgs {"dpkg-preconfig --apt";};
 
But you probably want to replace Proxy.israsrv.net.il:8080 with your.firewall.machine, or its IP address.

It is my understanding that is general you can not use command line ftp if you are behind a firewall unless you have the cooperation of your sys admin. I also understand that a possible solution is the there will be a machine running sockd while you use socks-clients.