Welcome to ISAserver.org

Can Not Upload files via FTP

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Can Not Upload files via FTP

Page: [1]

Message

<< Older Topic Newer Topic >>

Can Not Upload files via FTP - 3.Oct.2005 4:18:00 PM

Kehfera

Posts: 4
Joined: 2.Oct.2005
From: USA, East Coast, Virginia, Richmond
Status: offline

I upgraded my SBS 2003 with SP1 and ISA 2004 before it went into production. I have never been able to UPLOAD files from my FTP program (within Macromedia Dreamweaver or WS_FTP Pro 8.03). I located information on how to fix the FTP Filter to allow the upload of files. I took the check out of the read only box and assumed this would do the trick. I re-booted the PC using the firewall program as it did not fix the problem immediately or even the next day. (I rechecked to make sure the gremlins didn't check it again). I read the article on FTP and how it works and still not sure how it fits in with SBS and ISA 2004. I thought this was automatically setup via the wizards.

What can I do to fix this issue?

I am a novice with ISA 2004 (I have avoided using it in the past and opted for a PIX instead) I will need a bit more help than a general bit of info.

Thanks for the help in advance.

Kehf

Post #: 1

Featured Links*

RE: Can Not Upload files via FTP - 3.Oct.2005 5:42:00 PM

jdl

Posts: 42
Joined: 23.Sep.2005
From: Portugal
Status: offline

Where are you uploading????
to SBS or to another site thru SBS???

(in reply to Kehfera)

Post #: 2

RE: Can Not Upload files via FTP - 4.Oct.2005 3:55:00 PM

Kehfera

Posts: 4
Joined: 2.Oct.2005
From: USA, East Coast, Virginia, Richmond
Status: offline

from a workstation authenticating to SBS 2003 with ISA 2004 to another server in internet land that hosts my web page.

Cheers,
Kehf

(in reply to Kehfera)

Post #: 3

RE: Can Not Upload files via FTP - 5.Oct.2005 1:10:00 AM

sodium

Posts: 9
Joined: 14.Aug.2005
Status: offline

In Firewall policy for FTP (inbound and outbound) uncheck the Read-Only option based on your FTP requirements.

I believe you have already done this, based on your first note.

The next thing is to add a computer that does the FTP upload in the To or From Tab of the FTP rule.

I will recommend using a computername as most of us are using DHCP instead of static IP.

Apply Changes.

That should do be it.

(in reply to Kehfera)

Post #: 4

RE: Can Not Upload files via FTP - 11.Oct.2005 1:15:00 AM

Kehfera

Posts: 4
Joined: 2.Oct.2005
From: USA, East Coast, Virginia, Richmond
Status: offline

How is this done? I went to the rule and clicked on the FROM tab and when trying to add a computer it requires IP address and not name. Is this the FTP Outbound Rule?

I added the Internatl Network Set to the FROM tab and it works fine now. Question. Did I open up the server from the outside world or just FTP from the internal network? As a novice with ISA2004 I do not wish to learn any compromising techniques. If there is a way to limit this to a computer name I would like to know how. Clients may need to limit the FTP outbound access to a few users only. What would be the best way to accomplish this? Groups?

THANKS for your help!
Kehf

(in reply to Kehfera)

Post #: 5

RE: Can Not Upload files via FTP - 11.Oct.2005 7:30:00 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Kehf,

For apps that go through the Web proxy filter, make sure you configure those sites for Direct Access, or remove the Web proxy client configuration on the client.

HTH,
Tom

(in reply to Kehfera)

Post #: 6

RE: Can Not Upload files via FTP - 12.Oct.2005 1:48:00 AM

sodium

Posts: 9
Joined: 14.Aug.2005
Status: offline

For your case, it should be the FTP Outbound Rule.

If you added Internal Network Set to the FROM tab, all machines on your LAN will be able to upload to any FTP server on the Internet.

I am not sure what the dangers will be. I am not uncomfortable personally.

Is it possible to select a machine using the new computer option ? Just type a hostname e.g sodium.msfirewall.org and add it to the rule.

Alternatively, you can define your own computer set (also under add new network entities) to enable group access.

By restricting FTP upload access to a designated computer/ computer set, the principle of least previlge is enforced.

[ October 12, 2005, 01:53 AM: Message edited by: sodium ]

(in reply to Kehfera)

Post #: 7