Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

FTP and SNat clients

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> FTP and SNat clients Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
FTP and SNat clients - 9.Jan.2002 12:10:00 AM   
MagickMan

 

Posts: 12
Joined: 28.Oct.2001
From: Scottsdale, AZ
Status: offline 		I cannot download files from a full url path using Snat clients Ie.. ftp://host/filename It comes back with a DNS error. IF I enter just the host url I connect and get a listing, but again if dbl click the file, no go. (Right clk, copy to folder does work)

If I set the client as a Web proxy client everything works as it should. It seems to be acting as though the App filter is not enabled but it is.

Any suggestions?

MM
Post #: 1
RE: FTP and SNat clients - 14.Jan.2002 5:53:00 PM   
MagickMan

 

Posts: 12
Joined: 28.Oct.2001
From: Scottsdale, AZ
Status: offline 		Any suggestions???

Anyone


(in reply to MagickMan)
Post #: 2
RE: FTP and SNat clients - 15.Jan.2002 5:25:00 AM   
Guest
 Have you tried turning off the "Enable folder view for FTP sites" checkbox in teh advanced IE properties? Also try setting IE to passive mode (also in advanced properties).

------------------
Regards,
Jeremy
email: jeremy@cableserver.co.uk
www: www.cableserver.co.uk
MSN Messenger: jeremybcooke@hotmail.com

Two books I highly recommend:

(Click an image to see the book at amazon)


(in reply to MagickMan)
  Post #: 3
RE: FTP and SNat clients - 18.Jan.2002 11:15:00 PM   
MagickMan

 

Posts: 12
Joined: 28.Oct.2001
From: Scottsdale, AZ
Status: offline 		I have tried changing the IE options. This doesn't seem to make any difference.

(in reply to MagickMan)
Post #: 4
RE: FTP and SNat clients - 14.Feb.2002 11:52:00 PM   
Spike

 

Posts: 22
Joined: 6.Feb.2002
Status: offline 		Magick Man, did you ever get this to work? I am having similar problems. I can get connected to an ftp site, but then get errors. Below is what the tech guy on the site I am trying to get to shows and tells me.

tflr2000# ftp 209.11.160.21
Trying 209.11.160.21.21...
Connected to 209.11.160.21.
421 Service not available
ftp>

ftp update.8e6.net
Trying 209.11.160.24.21...
Connected to update.8e6.net.
421 Service not available
ftp>

Error 421 is caused by something called tcp wrappers in the router etc., where there are two files, host.deny and host.allow typically. You will have to modify this to allow R2000 to be able to ftp out to certain locations.

(in reply to MagickMan)
Post #: 5
RE: FTP and SNat clients - 15.Mar.2002 11:54:00 PM   
tebrainard@rochester

 

Posts: 2
Joined: 15.Mar.2002
From: Rochester MN
Status: offline 		I have the same issue, tried various versions of IE, teaked polisies. A packet trace show that the ftp request is issuing a "dir" on the \\ftp:ftp.sit.file.txt command, rather than a "get" file command

I can navigate to the file name in the ftp site and copy, but FTP is easier.

(in reply to MagickMan)
Post #: 6
RE: FTP and SNat clients - 18.Mar.2002 7:15:00 PM   
ToddC@kpcom.com

 

Posts: 6
Joined: 12.Jan.2002
Status: offline 		Similar issue here -- Secure NAT client. I'm able to use FTP client software just fine with Passive Mode OFF (no passive). But trying to access/download files via Internet Explorer (FTP via HTTP) is dying with a DNS, no page error.

Any thoughts on what settings to look at?

Thanks,

ToddC

(in reply to MagickMan)
Post #: 7
RE: FTP and SNat clients - 18.Mar.2002 7:38:00 PM   
craigshuey

 

Posts: 8
Joined: 18.Mar.2002
From: Atlanta, GA
Status: offline 		I was having the same problem... Open ISA Manager, Expand the tree, Right-mouse click on IP PACKET FILTERS under Access Policy. Select Properties. Check to make sure that Packet Filtering is ENABLED and that IP ROUTING is also enabled...

See if that helps. [Razz]

(in reply to MagickMan)
Post #: 8
RE: FTP and SNat clients - 18.Mar.2002 8:14:00 PM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hey guys,

I've tested this a million times and FTP always works with SecureNAT clients as long as you have:

1. No access controls requiring the SecureNAT client to provide credentials (because they can't)

2. FTP access filter enabled

3. Do not configure the FTP software to use the proxy

HTH,
Tom

(in reply to MagickMan)
Post #: 9
RE: FTP and SNat clients - 19.Mar.2002 10:56:00 PM   
tebrainard@rochester

 

Posts: 2
Joined: 15.Mar.2002
From: Rochester MN
Status: offline 		thanks, finally got it.

(in reply to MagickMan)
Post #: 10
RE: FTP and SNat clients - 27.Mar.2002 8:26:00 PM   
robbie0ne

 

Posts: 1
Joined: 27.Mar.2002
Status: offline
quote:
Originally posted by Spike:
Magick Man, did you ever get this to work? I am having similar problems. I can get connected to an ftp site, but then get errors. Below is what the tech guy on the site I am trying to get to shows and tells me.

tflr2000# ftp 209.11.160.21
Trying 209.11.160.21.21...
Connected to 209.11.160.21.
421 Service not available
ftp>

ftp update.8e6.net
Trying 209.11.160.24.21...
Connected to update.8e6.net.
421 Service not available
ftp>

Error 421 is caused by something called tcp wrappers in the router etc., where there are two files, host.deny and host.allow typically. You will have to modify this to allow R2000 to be able to ftp out to certain locations.
Hello, Did you ever figure this out. I have the exact problem.

Thanks.

(in reply to MagickMan)
Post #: 11
RE: FTP and SNat clients - 28.Mar.2002 6:01:00 PM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Robbie,

No figuring! Just do what I said above, and make sure that you don't have access policies that are blocking anonymous requests.

HTH,
Tom

(in reply to MagickMan)
Post #: 12
RE: FTP and SNat clients - 12.Jun.2002 4:45:00 AM   
WPinegar

 

Posts: 10
Joined: 2.Jun.2002
Status: offline 		I have this the exact same problem as describled in this thread. I've discovered however that if I set the proxy server settings in IE that FTP downloads work flawlessly...

(in reply to MagickMan)
Post #: 13
RE: FTP and SNat clients - 12.Jun.2002 10:12:00 AM   
iliko

 

Posts: 23
Joined: 23.May2002
Status: offline 		Hi everybody.
How to enable ftp access filter so that my SNAT clients can access all the ftp servers?

(in reply to MagickMan)
Post #: 14
RE: FTP and SNat clients - 12.Jun.2002 8:01:00 PM   
spouseele

 

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi iliko,

it's under Extensions -> Application Filters .

HTH,
Stefaan

(in reply to MagickMan)
Post #: 15
RE: FTP and SNat clients - 1.Jul.2002 7:50:00 PM   
shariqs

 

Posts: 15
Joined: 29.Jun.2002
From: St. Louis
Status: offline 		Try installing the ISA server service pack 1. I was experiencing a similar problem and it fixed my issue.

Hope this helps.

(in reply to MagickMan)
Post #: 16
RE: FTP and SNat clients - 2.Jul.2002 3:41:00 AM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hey guys,

Also make sure that you do NOT configure the FTP client application to use the ISA Server as a firewall. The access should be completely transparent.

HTH,
Tom

(in reply to MagickMan)
Post #: 17
RE: FTP and SNat clients - 4.Jul.2002 5:21:00 PM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hey guys,

Regarding the FTP issues, check my FAQ on this. You can search the Site using the "Site Search" or go to www.isaserver.org/shinder. There does seem to be a bad problem with SecureNAT and FTP if you're using PASV.

Thanks!

Tom

(in reply to MagickMan)
Post #: 18
RE: FTP and SNat clients - 5.Jul.2002 6:49:00 PM   
MagickMan

 

Posts: 12
Joined: 28.Oct.2001
From: Scottsdale, AZ
Status: offline 		Thanks Tom for getting to the bottom of this. Now the big wait for the fix.

(in reply to MagickMan)
Post #: 19
RE: FTP and SNat clients - 30.Aug.2002 6:59:00 AM   
ToddC@kpcom.com

 

Posts: 6
Joined: 12.Jan.2002
Status: offline 		Tom,

Maybe there is a miss-understanding in this thread?

I and others seem not to have a problem with FTP client software, eg., CuteFTP, FTP Explorer. Rather, when Internet Explorer tries to download a file from a web site that links to an FTP site (in the browser address field, example: ftp://ftp.prserv.net/pub/client/win32/ncsetup.exe) then there is this problem of not connecting and getting the DNS error, no page, etc.

I've tried all kinds of settings in IE for this. Still to no avail. Not sure what to do. Is this possibly related to the FTP problem you alluded to re SecureNAT, FTP and PASV mode?

Thanks,

ToddC

(in reply to MagickMan)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> FTP and SNat clients Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts