Welcome to ISAserver.org

FTP Client out through ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> FTP Client out through ISA

Page: [1]

Message

<< Older Topic Newer Topic >>

FTP Client out through ISA - 17.Dec.2001 10:55:00 PM

rpainter

Posts: 21
Joined: 29.Aug.2001
Status: offline

I have set up ISA to allow FTP out to all users. But ISA is NOT letting FTP out from MOST of my boxes, regardless of the user account. Some boxes do get out...All can get out if I "Enable" the default "allow-all" filter. Of course, I can't do that.
I am using the "ftp Explorer" GUI product. I have spent some time on this, but Am now crying uncle..Can Anyone help me with some suggestions?

I have a Protocol Access rule:
FTP,
FTP download only, and
FTP server: ALLOW for ANY request

I also tried: Packet filter:
TCP port 21 and port 20 both directions for each. Tried Packet filter on and off with Protocol Rule.

Also tried Box with DHCP, and Static Ip with manual cfg of Gateway ...(SecureNAT?)

On a box that works, all users can get out, on box that does not work, no users can get out, including admin accounts....

I also tried removing the old Proxy client from a box..(I upgraded Proxy server to ISA.)

I have tried to get out from IE through http tunnel, I can get out if I first check the "use web based ftp option" in advanced options, but this is HTTP tunneling right, so it does not count ?

ANY HELP IS GREATLY APPRECIATED !

Russell Painter
rpainter@randalllamb.com

Post #: 1

Featured Links*

RE: FTP Client out through ISA - 18.Dec.2001 1:51:00 PM

mleman

Posts: 68
Joined: 23.Oct.2001
From: UK
Status: offline

i have set my isa to allow ftp as well, as it stands at the moment the filter only allows me to use ftp and ftp download. it works fine, when another client machine needs ftp, i log my user and pass in to alloww them to doit, i know what people are downloading then, i would not have thought you would need to use the ftp server option though have you tried configuring it without ftp server and just ftp and ftp download.

works fine through i explorer

(in reply to rpainter)

Post #: 2

RE: FTP Client out through ISA - 18.Dec.2001 10:46:00 PM

rpainter

Posts: 21
Joined: 29.Aug.2001
Status: offline

Thanks for your reply !
I tried to remove FTP server but it did not help.
I'll take any suggestions!

P.S. Clarification:
Protocaol Access Rule:allow any request for:

FTP
FTP download
FTP server

HELP !

(in reply to rpainter)

Post #: 3

RE: FTP Client out through ISA - 22.Jan.2002 5:22:00 AM

OzTeK

Posts: 7
Joined: 13.Sep.2001
Status: offline

quote:
Originally posted by rpainter:
Thanks for your reply !
I tried to remove FTP server but it did not help.
I'll take any suggestions!
P.S. Clarification:
Protocaol Access Rule:allow any request for:
FTP
FTP download
FTP server
HELP !

I'm having this same problem. Any help would be appreciated.

(in reply to rpainter)