• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA server support for third part ftp clients?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> General >> ISA server support for third part ftp clients? Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA server support for third part ftp clients? - 21.Apr.2002 7:50:00 PM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
I can see some post in the ISA server newgroups of microsoft and other boards like this:

>how do i connect ws ftp pro(or other third part ftp clients) over isa to a ftp server? (no firewall client)

I have the same problem, i cant resolve it.
This happen no only with the ws ftp pro, too with CuteFTP and others.
I only can access to ftp sites(no firewall client) using the IE.

Using firewall client work fine the problem in with no fiewall client. Configuring the FTP Client to use the ISA server how proxy http or proxy FTP is the problem.
I supose that is one problem in the ISA server and not one configuration problem.

Any other ideas

best regard
Post #: 1
RE: ISA server support for third part ftp clients? - 22.Apr.2002 7:25:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi ccntv1,

3rd party FTP clients work fine with ISA Server and SecureNAT clients. Make sure that you DO NOT configure the FTP client software to use the ISA Server as a proxy.

HTH,
Tom

(in reply to ccntv1)
Post #: 2
RE: ISA server support for third part ftp clients? - 22.Apr.2002 3:13:00 PM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
hi tshinder

>3rd party FTP clients work fine with ISA Server >and SecureNAT clients.
> Make sure that you DO NOT configure the FTP
> client software to use the ISA Server as a
> proxy

This is truth but my clients are no SecureNat clients and they no have the firewall client instaled. All they are Web clients.

"My Isa server have only one NIC! y the default gateway the my client is one router and no the isa server(they are not SecureNat clients)"

So, the only way to connect to one FTP site in internet is to configure the ftp client to use the isa server how proxy server.

But this is no working!

This ony work with the Internet Explorer(ISA Server how proxy server) how ftp client and no with 3rd party FTP clients.

All the other thing wok fine.

I working in the ISA Server vey hard and I have many thing working in it( it is very good).

Tha ony thing is this problem and the sopport for sock5

excuse me my english :-)

best regard

(in reply to ccntv1)
Post #: 3
RE: ISA server support for third part ftp clients? - 22.Apr.2002 3:30:00 PM   
JMcGregor-Johnson

 

Posts: 21
Joined: 19.Mar.2002
From: London
Status: offline
We are using Ftp Pro version 7 through ISA Server with no problem. All our clients are Secure Nats. Make sure that you are not using a firewall and that you are set to use passive mode.
Hope this helps [Smile]
James

(in reply to ccntv1)
Post #: 4
RE: ISA server support for third part ftp clients? - 22.Apr.2002 3:59:00 PM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
Hi James McGregor-Johnson

>We are using Ftp Pro version 7 through ISA >Server with no problem. All our clients are >Secure Nats.

thanks

My clients are no secureNAt clients how i said in the last post.
"My Isa server have only one NIC! y the default gateway the my client is one router and no the isa server(they are not SecureNat clients)"

>Make sure that you are not using a firewall and >that you are set to use passive mode.

Yes, all client have the Ftp client in passive mode.
I use CuteFTP and WS pro ftp.

best regard.

(in reply to ccntv1)
Post #: 5
RE: ISA server support for third part ftp clients? - 22.Apr.2002 4:18:00 PM   
JMcGregor-Johnson

 

Posts: 21
Joined: 19.Mar.2002
From: London
Status: offline
Hi there
I don't quiet understand how your ISA Server only has one NIC. Do you not have one internal and one external?
I think that if you are only using web proxy lients that you are going to struggle due to the Winsock protocols.
I think you may need to upgrade to Firewall clients.
Sorry if this is not much help
James

(in reply to ccntv1)
Post #: 6
RE: ISA server support for third part ftp clients? - 22.Apr.2002 5:14:00 PM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
hi James McGregor-Johnson

>I don't quiet understand how your ISA Server >only has one NIC. Do you not have one internal >and one external?

I dont have one extenal and one internal. I have only one NIC. This is not one problem.It is working fine.
If you are interesting in this confgiguration write to ccntv2@hotmail.com

>I think that if you are only using web proxy >clients that you are going to struggle due to >the Winsock protocols.

Yes, may be.

>I think you may need to upgrade to Firewall >clients.

Yes, with firewall client all ftp client working fine.
But i need that the clients no have firewall client instaled.

>Sorry if this is not much help

thanks, your comment always are good.
best regard

(in reply to ccntv1)
Post #: 7
RE: ISA server support for third part ftp clients? - 22.Apr.2002 10:10:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi ccntv1,

an ISA server in integrated mode with only one NIC? I believe this is an unsupported configuration. [Razz]

HTH,
Stefaan

(in reply to ccntv1)
Post #: 8
RE: ISA server support for third part ftp clients? - 23.Apr.2002 1:27:00 AM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
Hi Stefaan

>an ISA server in integrated mode with only one NIC? I believe this is an unsupported configuration.

No, this configutration is perfectly possible.

by

(in reply to ccntv1)
Post #: 9
RE: ISA server support for third part ftp clients? - 23.Apr.2002 4:59:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi ccntv1,

I haven't said it will not work. I'm only sure that this is an unsupported configuration by Microsoft. So, some things may work, others not. [Big Grin]

HTH,
Stefaan

[ April 23, 2002, 04:59 PM: Message edited by: spouseele ]

(in reply to ccntv1)
Post #: 10
RE: ISA server support for third part ftp clients? - 23.Apr.2002 8:31:00 PM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
hi Stefaan

ok, [Razz] is truth but i think that the problem with ftp clients no have relation to the support of microsoft about the nics. [Roll Eyes]

best regard.

(in reply to ccntv1)
Post #: 11
RE: ISA server support for third part ftp clients? - 24.Apr.2002 12:29:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hey guys,

I have played around with the single NIC config, and it *sometimes* works, but I believe the application filters (esp. the FTP filter) would really like you to do things right [Big Grin]

HTH,
Tom

(in reply to ccntv1)
Post #: 12
RE: ISA server support for third part ftp clients? - 24.Apr.2002 12:37:00 AM   
jgisler

 

Posts: 56
Joined: 10.Apr.2001
Status: offline
Half-Ass is all I gotta say. Your configuration sounds half-ass.

(in reply to ccntv1)
Post #: 13
RE: ISA server support for third part ftp clients? - 24.Apr.2002 2:12:00 AM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
hi jgisler

>Your configuration sounds half-ass.

My configuration is perfectly right, all depend of the network topology that you want.

HI Tom

>I have played around with the single NIC config, and it *sometimes* works, but I believe the application filters (esp. the FTP filter) would really like you to do things right

All the filter work very well. Example, the http redirector is working fine due to the firewall client is playing good.

Have you proved the ISA with only one nics using ftp clients with the ISA server how proxy client(not firewall client) client?.

Best regard

(in reply to ccntv1)
Post #: 14
RE: ISA server support for third part ftp clients? - 24.Apr.2002 3:50:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi ccntv1,

for web proxy clients and firewall clients the TCP connection endpoints are the client and the ISA internal interface (not the real destination). You can verify that with a Network Monitor trace. If you want a free one who decodes also (to some extend) the Firewall Client protocol, check out http://www.isaserver.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=14;t=000062 .

For SecureNAT clients the TCP connection endpoints are normally the internal client and the real destination. So, it's more like setting up a single armed router. Not a good way of doing it. [Big Grin]

HTH,
Stefaan

(in reply to ccntv1)
Post #: 15
RE: ISA server support for third part ftp clients? - 24.Apr.2002 6:23:00 PM   
ccntv1

 

Posts: 13
Joined: 18.Apr.2002
Status: offline
Hi Stefaan

>For web proxy clients and firewall clients the TCP connection endpoints are the client and

the ISA internal interface (not the real destination).

Well, this is OK. [Smile]

> You can verify that with a Network Monitor trace.

I traced the problem with Network Monitor when i configure the ftp client with the ISA server how http proxy (no firewall client instaled).

Example: CuteFTP ---> proxy1 http (the isa server) ---->oher proxy2 ----> internet

The CuteFTP connect to the ftp.redhat.com and this is the ISA response:

I change the names and IP address for privacy, excuse me.

STATUS:> Getting listing ""...
STATUS:> Resolving host name proxy.anything...
STATUS:> Host name proxy.etc.etc resolved: ip = "any ip".
STATUS:> Connecting to http proxy server proxy.anything...ect:8080 (ip = "any

ip")...
STATUS:> Requesting server...
GET ftp://ftp.redhat.com/ HTTP/1.1
Host: ftp.redhat.com:21
Range: bytes=0-
Referer: /
User-Agent: CIS TE/1.0
Connection: Keep-Alive
Proxy-Connection: Keep-Alive
Accept: *.*, */*
Pragma: no-cache
Proxy-Authorization: Basic "auth"

STATUS:> Receiving reply...
HTTP/1.1 200 OK
Via: 1.1 "nombre proxy1", 1.1 "nombre del proxy2"
Connection: close
Proxy-Connection: close
Content-Type: text/html

STATUS:> Downloading...
STATUS:> Transfer complete.

How you will see all the connection steps are well.

What is happening? [Confused]

OH!, the ISA responded "Content-Type: text/html" (one html page!) and in the data of the packet the ISA server return one list of the files of the ftp server( in internet) in one html page!. [Embarrassed]

The CuteFTP server can no show the directories becouse it will have one html page that no

understand.

What you think about this?

>For SecureNAT clients the TCP connection endpoints are normally the internal client and the

real destination. So, it's more like setting up a single armed router. Not a good way of

doing it.

That is ok. This is not my case.

Best regard
CCntv1

(in reply to ccntv1)
Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> General >> ISA server support for third part ftp clients? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts