I am designing a process for users (some on a company LAN and some on internet) to upload files to a third party's FTP server. The critical requirement is to enforce a secure (FTPES) connection to the server. I am recommending the FileZilla client but as FTES is an optional setting I can only request the users create secure FTP connections - can't force them to. I should mention here that the FTP server belongs to a third party provider and if there are server settings to enforce FTPES connections, we can't get these enabled.
My idea is to set up an FTP Proxy server that acts as a wrapper to the third party server and which only accepts FTPES connections.
So, has anyone heard of an FTP Proxy server that can do this? The closest I have found after hours of scouring the web is Kiesoft Advanced FTP Server, but this only runs as a desktop app, not as a service.
CrushFTP can act as a proxy and enforce FTPES. Directions for implementing this are available on their wiki.
For anyone else looking for this sort of functionality, the
mod_proxy
module for ProFTPD supports proxying of FTP and FTPS, and can be configured to require FTPS connections only.Full disclosure: I'm the author of
mod_proxy
and ProFTPD.