Welcome to ISAserver.org

RE: Discussion about the publishing FTP servers on an alternate port article

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> RE: Discussion about the publishing FTP servers on an alternate port article

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: Discussion about the publishing FTP servers on an a... - 15.Mar.2004 4:10:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Custler,

Thanks! But I still have no problem with Active FTP when pubslihing on an alternate port number [Smile]

Thanks!
Tom

(in reply to tshinder)

Post #: 21

Featured Links*

RE: Discussion about the publishing FTP servers on an a... - 15.Mar.2004 4:34:00 PM

Custler

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline

In your article you publish internal FTP server on IP 10.0.0.2 and PORT 21 .

Try to move it from port 21 to port 99 and try to establish Active FTP connection from 192.168.1.90.

There are two possibilities:
1. You receive "500 Invalid PORT Command". Most likely. OR
2. Secondary connection will be established on port 20 anyway. I don't know why and how [Confused]

.

[ March 15, 2004, 05:46 PM: Message edited by: Custler ]

(in reply to tshinder)

Post #: 22

RE: Discussion about the publishing FTP servers on an a... - 15.Mar.2004 11:23:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Custler,

You are talking about the Internet IP address. I never considered that an issue, as you can create thousands of virtual FTP servers, each with a different IP address, all listening on TCP 21. Its the external interface that is usually the problem!

Thanks!
Tom

(in reply to tshinder)

Post #: 23

RE: Discussion about the publishing FTP servers on an a... - 16.Mar.2004 9:40:00 AM

Custler

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline

Excuse me for dull questions, but please advise me where I am wrong:

If I make server publishing rule exectly according to your article, except internal FTP server port number (7564 in my above example), I see the follow packets on ISA external interface :

AS you can see - the data connection established from port 20 instead of 7563

WHY?

[ March 16, 2004, 09:53 AM: Message edited by: Custler ]

(in reply to tshinder)

Post #: 24

RE: Discussion about the publishing FTP servers on an a... - 16.Mar.2004 11:02:00 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Custler,

Why do you need to use an alternate address for the Internal server? Private addresses are very reasonably priced these days [Smile]

Thanks!
Tom

(in reply to tshinder)

Post #: 25

RE: Discussion about the publishing FTP servers on an a... - 16.Mar.2004 11:25:00 AM

Custler

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline

Alternate port number for internal FTP server is need for place a few FTP
sites or/and Web sites on the one computer.
It is usual for not huge company with not a big traffic FTP/WEB sites.
For example, as extreamal configuration, I place TREE FTP sites AND FOUR Web
sites AND ISA server on ONE computer. [Eek!]

(in reply to tshinder)

Post #: 26

RE: Discussion about the publishing FTP servers on an a... - 17.Mar.2004 1:33:00 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Custler,

But you can create multiple FTP and Web virtual servers on the same machine, with each virutal server listening on a different private address, so you don't need to use alternate port numbers on the internal server.

HTH,
Tom

(in reply to tshinder)

Post #: 27

RE: Discussion about the publishing FTP servers on an a... - 17.Mar.2004 8:14:00 AM

Custler

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline

Yes, of course! You absolutely right!
But I am testing such configuration for understanding How to publish some unusual servers with secondary connections.

Thanks for you attention and patience.

WBR,
Sergey.

(in reply to tshinder)

Post #: 28

RE: Discussion about the publishing FTP servers on an a... - 17.Mar.2004 10:43:00 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Sergey,

No problems! Its been an interesting experiement.

Thanks!
Tom

(in reply to tshinder)

Post #: 29

RE: Discussion about the publishing FTP servers on an a... - 14.Aug.2004 6:11:00 PM

brokenribgolfer

Posts: 12
Joined: 23.Feb.2002
Status: offline

Tom,

Thanks for another great article. This certainly allows me to publish an ftp server to the outside world. However, I cannot access it from my internal network. I want to use the same command line (i.e. ftp ftp.mydomain.com) from anywhere, including locally. I know this is possible, because I did it with ISA Server 2000.

Any thoughts?

Thanks.

Mark

(in reply to tshinder)

Post #: 30

RE: Discussion about the publishing FTP servers on an a... - 14.May2005 8:43:00 PM

ricke

Posts: 3
Joined: 14.May2005
Status: offline

Hi I tried the FTP Publish method and it seemed to have been set up correctly but when I connect to my FTP site over the Internet I get this message:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\ricke>cd\

C:\>ftp
ftp> open xx.xx.xx.xx 99
Connected to xx.xx.xx.xx.
Connection closed by remote host.

Why would it get connected OK and then get closed by the host without proceeding? Does this mean that the connection was denied?

In my scenario I have:
Internet (cable modem) ==> ISA 2004 server (dual homed) ==> IIS Server running FTP on a private IP address

Thanks for any tips,
Rick

(in reply to tshinder)

Post #: 31

RE: Discussion about the publishing FTP servers on an a... - 27.Jul.2007 2:11:21 PM

tbone2k

Posts: 33
Joined: 17.Oct.2005
From: Cambridge, Ontario
Status: offline

Hi Tom. A little late I suppose, but I was trying to publish my FTP server on a different port as well. Followed the instructions but it still didn't work. I could connect to the FTP server direct from an internal network client, but if I tried from an external source, the client would say it timed out and the ISA server logged the following:

Failed Connection Attempt
ISAServer 7/27/2007 2:04:31 PM

Log type: Firewall service

Status: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

Rule: Publish FTPServer FTP on port 6660

Source: External ( 216.75.170.190:60828)

Destination: Internal ( 10.1.0.92:21)

Protocol: FTP Server

User:

Additional information

Number of bytes sent: 0 Number of bytes received: 0
Processing time: 20953ms Original Client IP: 216.75.170.190
Client agent: I was able to fix the problem by going to the "To" tab in the purblishing rule and changing the option so that requests appear to come from the ISA server. Then it worked. Will that cause other problems?

(in reply to tshinder)

Post #: 32