Welcome to ISAserver.org

FTP filter not working after windows update

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> FTP filter not working after windows update

Page: [1]

Message

<< Older Topic Newer Topic >>

FTP filter not working after windows update - 4.Aug.2007 9:11:14 AM

fermo111

Posts: 17
Joined: 7.Oct.2006
Status: offline

The "Request appear to come from ISA Server computer" option does not work anymore when the FTP filter is enabled. It started after having done a windows update.

Anybody can help?

Luca

Post #: 1

Featured Links*

RE: FTP filter not working after windows update - 5.Aug.2007 5:10:20 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Luca,

details please!

Which update?
What is your exact configuration?
How did you determine it? Steps to reproduce the problem?
Can you proof it with a network monitor trace?
...

HTH,
Stefaan

(in reply to fermo111)

Post #: 2

RE: FTP filter not working after windows update - 5.Aug.2007 6:25:34 AM

fermo111

Posts: 17
Joined: 7.Oct.2006
Status: offline

I don't think I can give much more information here.

ISA runs on a Windows Server 2003 with SP1. Periodically (once every 3-4 months) I apply the updates that arrive. After having applied the last batch of updates all FTP published do not work anymore. I have tracked the problem to the fact that, even if the flag "Request appear to come from ISA Server computer" is set, ISA Server does not do it. Or better, it does change the source IP address if I disable the FTP filter, but it does not when I enable it.

This is an ISA Server 2004 with SP2. I have tried to apply the SP3 without success. The installation of SP3 fails near the end as I reported in this post.

I did not provide much info because I hoped this was a known problem. If I am the first one to report I doubt there is something that can be done, besides reinstalling ISA Server or (better yet) getting rid of Microsoft stuff once for all.

Luca

(in reply to spouseele)

Post #: 3

-- - 5.Aug.2007 6:26:37 AM

fermo111

Posts: 17
Joined: 7.Oct.2006
Status: offline

(in reply to spouseele)

Post #: 4

RE: FTP filter not working after windows update - 5.Aug.2007 6:36:31 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Luca,

are you talking about Windows 2003 updates or ISA updates?

quote:

If I am the first one to report I doubt there is something that can be done, besides reinstalling ISA Server or (better yet) getting rid of Microsoft stuff once for all.

Ha... I work with Checkpoint and ISA and I can tell you that the Checkpoint updates/releases has also their problems. So, instead of complaining why do you not contact Microsoft PSS? If there is indead a MS problem you will not have to pay for it!

HTH,
Stefaan

(in reply to fermo111)

Post #: 5

RE: FTP filter not working after windows update - 5.Aug.2007 8:11:49 AM

fermo111

Posts: 17
Joined: 7.Oct.2006
Status: offline

Hi Stefaan,

thanks for your answer

quote:

ORIGINAL: spouseele

are you talking about Windows 2003 updates or ISA updates?

I am talking of Windows 2003 updates. ISA updates do not install anyway. Contacting Microsoft? It is easier to reinstall everything

(in reply to spouseele)

Post #: 6

RE: FTP filter not working after windows update - 13.Aug.2007 4:58:02 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Luca,

any chance that Windows 2003 SP2 was installed? If so, make sure that Receive Side Scaling and TCP Offload Support are disabled per KB article http://support.microsoft.com/kb/936594 (EnableTCPA = 0x0 and EnableRSS = 0x0).

HTH,
Stefaan

(in reply to fermo111)

Post #: 7

RE: FTP filter not working after windows update - 19.Aug.2007 7:00:17 PM

fermo111

Posts: 17
Joined: 7.Oct.2006
Status: offline

Hi spouseele

thanks for the suggestion, but I have SP1. Anyway good to know about this fix.

Luca

(in reply to spouseele)

Post #: 8

RE: FTP filter not working after windows update - 20.Aug.2007 1:37:22 PM

fermo111

Posts: 17
Joined: 7.Oct.2006
Status: offline

There is something I can add to describe this problem.

Enabling the flag "Request appear to come from ISA Server computer", makes ISA Server change the source IP address of the incoming packets, but it gives them the address of the ISA Server *external* interface instead of the internal one.

Luca

(in reply to fermo111)

Post #: 9