Welcome to ISAserver.org

RE: FTP on firewall client

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> RE: FTP on firewall client

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: FTP on firewall client - 28.Sep.2004 8:32:00 PM

nicx

Posts: 5
Joined: 6.Sep.2004
Status: offline

Hi,

I have absolutely the same problem. I want to connect from an internal client with leechftp and firewall-client runnig to an external ftp-server. the connection works, but if the "list" comannd is sent leechftp get a socket error and looses its connection. Even with PASV mode configured the same problem persists.

any help?

regards,
nicx...

(in reply to Linke Loe)

Post #: 21

Featured Links*

RE: FTP on firewall client - 11.Oct.2004 2:10:00 PM

shastin

Posts: 1
Joined: 11.Oct.2004
Status: offline

this is log from my ftp program (ISA firewall client enabled):

code:

Mon Oct 11 16:11:53 2004 Connecting download.kompas.kolomna.ru [IP=217.16.28.235:21]
Mon Oct 11 16:11:56 2004 Socket connected, Waiting for welcome message.
Mon Oct 11 16:12:03 2004 220 Microsoft FTP Service
Mon Oct 11 16:12:03 2004 USER anonymous
Mon Oct 11 16:12:03 2004 331 Anonymous access allowed, send identity (e-mail name) as password.
Mon Oct 11 16:12:03 2004 PASS ********
Mon Oct 11 16:12:04 2004 230 Anonymous user logged in.
Mon Oct 11 16:12:04 2004 Login Successful
Mon Oct 11 16:12:04 2004 REST 100
Mon Oct 11 16:12:04 2004 350 Restarting at 100.
Mon Oct 11 16:12:04 2004 This site can resume broken downloads.
Mon Oct 11 16:12:04 2004 REST 0
Mon Oct 11 16:12:04 2004 350 Restarting at 0.
Mon Oct 11 16:12:04 2004 PWD
Mon Oct 11 16:12:05 2004 257 "/" is current directory.
Mon Oct 11 16:12:05 2004 TYPE A
Mon Oct 11 16:12:05 2004 200 Type set to A.
[B]Mon Oct 11 16:12:05 2004 PASV
Mon Oct 11 16:12:08 2004 227 Entering Passive Mode (217,16,28,235,5,114)[/B]
Mon Oct 11 16:12:08 2004 LIST -la
Mon Oct 11 16:12:20 2004 425 Can't open data connection.
Mon Oct 11 16:12:20 2004 Error occured!

with ie6 from web proxy i list dirs on ftp successfull.
why ftp progtam through firewall client cannot list dirs?

(in reply to Linke Loe)

Post #: 22

RE: FTP on firewall client - 12.Oct.2004 2:13:00 PM

willi042

Posts: 33
Joined: 12.Oct.2004
Status: offline

I also had / have taht problem.

A possible way to solve is change Firewall Client Application settings.

For example I have Ftp Explorer. The app name is ftpx.exe. When you add ftpx.exe as apllication with parameter RemoteBindTCP Ports and Value 0 you can list directory contents.

Unfortunately this only helps with some apps.
Whe I try to download with other apps which try to connect with program specific features I get socket errors in the application logs.
A FTP Up- and Download with FTP Exploerer from these workstations works fine.
So I guess Firewall protocol settings are O.K. but something else is wrong but what ?

Any ideas

(in reply to Linke Loe)

Post #: 23

RE: FTP on firewall client - 12.Oct.2004 2:13:00 PM

willi042

Posts: 33
Joined: 12.Oct.2004
Status: offline

(in reply to Linke Loe)

Post #: 24

RE: FTP on firewall client - 17.Nov.2004 10:11:00 AM

MCLeo

Posts: 3
Joined: 9.Nov.2004
From: Kazakhstan
Status: offline

Microsoft Article - Active mode FTP client programs cannot access an FTP server from behind Internet Security and Acceleration Server 2004
http://support.microsoft.com/?scid=kb;en-us;884580&spid=2108&sid=global

(in reply to Linke Loe)

Post #: 25

RE: FTP on firewall client - 17.Nov.2004 3:25:00 PM

dstanizzo

Posts: 2
Joined: 17.Nov.2004
Status: offline

For Example I Receive the following:

ftp> open ftp.symantec.com
Connected to ftp.symantec.speedera.net.
220-
220- This system is for the use of authorized users only. Individuals using
220- this computer system without authority, or in excess of authority, are
220- subject to having all of their activities on this system monitored and
220- recorded by system personnel. In the course of monitoring individuals
220- improperly using this system, or in the course of system maintenance,
220- the activities of authorized users may also be monitored. Anyone using
220- this system expressly consents to such monitoring and is advised that
220- if such monitoring reveals possible evidence of criminal activity, system
220- personnel may provide the evidence of such monitoring to law enforcement
220 officials.
User (ftp.symantec.speedera.net:(none)):
331 Password required for USER.

230 User anonymous logged in.
ftp>
ftp> cd public/english_us_canada/antivirus_definitions/norton_antivirus/static
250 CWD command successful
ftp> lcd C:\Temp
Local directory now C:\Temp.
ftp> bin
200 TYPE set to I.
ftp> hash
Hash mark printing On ftp: (2048 bytes/hash mark) .
ftp> prompt
Interactive mode Off .
ftp> get symcdefsx86.exe
> ftp: bind :Can't assign requested address
ftp> quit

(in reply to Linke Loe)

Post #: 26