Welcome to ISAserver.org

Unusual Behaviour: FTP requires HTTP to access an FTP site.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> Unusual Behaviour: FTP requires HTTP to access an FTP site.

Page: [1]

Message

<< Older Topic Newer Topic >>

Unusual Behaviour: FTP requires HTTP to access an FTP s... - 19.Jul.2002 9:12:00 AM

balwantrathore

Posts: 8
Joined: 29.May2002
From: Bombay
Status: offline

I am using SecureNAT for HTTP and FTP Access. There are two rules.
Rule one allows HTTP access to LAN people based on IPs.
Rule two allows FTP Access to Selected people for selected destinations based on IPs.
If I remove an IP from client address set of rule one FTP stops working, which is allowed by rule two. If I put that IP again to client address set of rule one it starts working.
I don't want to give HTTP to the people who are getting FTP. The necessity of giving HTTP to the people who are using FTP looks strange.

FAQ Question 344 addresses this issue as follows.

Question 344 - Jul 04, 2002 (By Thomas Shinder): I'm trying to use FTP from my SecureNAT client but it does not work! It works with the Web Proxy and Firewall clients, but not the SecureNAT clients. Why?
There is a bug that was not addressed in SP1 that causes PASV FTP requests from SecureNAT clients to fail when the following configurations are in place: 1. Multiple IP addresses are bound to the external interface 2. IP Routing is enabled on the ISA Server You can solve the problem by using the Web Proxy client or the Firewall client. At the time of this writing (July 4, 2002) there is no hotfix.

Please shed a light on it. All suggestions most welcome "[Wink]"

Cheers,

Balwant Rathore
Consultant
Paladion Networks Ltd.
www.paladion.net

Post #: 1

Featured Links*

RE: Unusual Behaviour: FTP requires HTTP to access an F... - 20.Jul.2002 2:54:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Balwant,

If you're using the SecureNAT client configuration, all you need to do is give access to the FTP Protocol Rule, and the user will be able to use the FTP access filter to gain access to the Firewall service and get to FTP sites.

HTH,
Tom

(in reply to balwantrathore)

Post #: 2

RE: Unusual Behaviour: FTP requires HTTP to access an F... - 22.Aug.2002 11:07:00 PM

saint97007

Posts: 4
Joined: 28.Mar.2002
From: Beaverton Oregon
Status: offline

I am having an FTP outbound problem with my SecureNAT clients.

I cannot get my Win98 clients set up to have the ability to uplaod FTP files to FTP servers such as FTP.LazerQuick.com

If I enter this address in my web browser, I get the following message:
"The folder ftp://ftp.lazerquick.com is read-only because the proxy server is not set up to allow full access. To move, paste, rename, or delete files, you must use a different proxy. For information on changing your proxy, contact your administrator."

Any suggestions for either the ISA server end or the client would be helpful.

Thank you,
Dale

(in reply to balwantrathore)

Post #: 3

RE: Unusual Behaviour: FTP requires HTTP to access an F... - 23.Aug.2002 1:16:00 AM

skipster

Posts: 550
Joined: 12.Oct.2001
From: newport beach
Status: offline

Do you have the firewall lcinet installed on these machines? is there a protocol rule in place that will give access to FTP? If so in your IE enable folder view for fTP, and also change it passive FTP.

WURD

(in reply to balwantrathore)

Post #: 4

RE: Unusual Behaviour: FTP requires HTTP to access an F... - 23.Aug.2002 10:31:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Dale,

ISA does *not* support FTP upload through the web proxy service. For more info, check out my article http://www.isaserver.org/pages/articles.asp?art=356 about FTP.

HTH,
Stefaan

(in reply to balwantrathore)

Post #: 5