Projects / frox


Frox is a transparent FTP proxy that runs under Linux and *BSD. It should also work on other UNIX OSes that use ipfilter. It supports caching of FTP downloads, either by redirecting through a Squid proxy, or through its own local cache. Downloads may also be transparently scanned for viruses (through an external scanner). Additionally there is an interface for writing scripts to add features or modify frox's behavior, and examples are included to limit download file size and to transparently direct connections to specific hosts to mirror servers. The proxy is written with security in mind, and in the default setup runs as a non-root user in a chroot jail.

Operating Systems

Recent releases

  •  11 Nov 2004 09:21

    Release Notes: Download/upload throttling and SSL support were added. *BSD support was improved, and many smaller bugfixes were made.

    •  14 May 2002 18:46

      Release Notes: A fix for a bug that was causing truncation of FTP uploads in passive mode.

      •  18 Mar 2002 15:04

        Release Notes: This version adds support for *BSD and other OSes which use ipfilter. Files downloaded through frox may now be transparently scanned for viruses (via an external program). Config file options can now be specified on a per-host basis. There are new options for running frox from inetd and for limiting connections by IP.

        •  30 Nov 2001 02:52

          Release Notes: This release contains a fix for a buffer overflow bug which potentially allows a hostile FTP server to execute arbitrary code as the user that frox runs as. Installations are only vulnerable if they are using the local caching module.

          •  17 Nov 2001 11:33

            Release Notes: Some conditions that could cause main program termination were fixed. A fix for caching where absolute pathnames are given was made. Linux kernel 2.0.x support was added.

            Recent comments

            30 Apr 2001 21:26 abo

            Very interesting...
            This allows you to transperantly proxy ftp and redirect requests via a squid cache... neat. This gives you a way to transperantly proxy and cache ftp from non-ftp-proxy aware ftp clients.

            At first glance it appears to be fairly minimal and clean. The only potential worry for larger sites is it's one thread/connection model might not scale well, particularly as ftp connections tend to be more long-lived than http.


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.