FTP Client out through ISA (Full Version)

All Forums >> [ISA Server 2000 Firewall] >> General



Message


rpainter -> FTP Client out through ISA (17.Dec.2001 10:55:00 PM)

I have set up ISA to allow FTP out to all users. But ISA is NOT letting FTP out from MOST of my boxes, regardless of the user account. Some boxes do get out...All can get out if I "Enable" the default "allow-all" filter. Of course, I can't do that.
I am using the "ftp Explorer" GUI product. I have spent some time on this, but Am now crying uncle..Can Anyone help me with some suggestions?

I have a Protocol Access rule:
FTP,
FTP download only, and
FTP server: ALLOW for ANY request

I also tried: Packet filter:
TCP port 21 and port 20 both directions for each. Tried Packet filter on and off with Protocol Rule.

Also tried Box with DHCP, and Static Ip with manual cfg of Gateway ...(SecureNAT?)

On a box that works, all users can get out, on box that does not work, no users can get out, including admin accounts....

I also tried removing the old Proxy client from a box..(I upgraded Proxy server to ISA.)

I have tried to get out from IE through http tunnel, I can get out if I first check the "use web based ftp option" in advanced options, but this is HTTP tunneling right, so it does not count ?

ANY HELP IS GREATLY APPRECIATED !

Russell Painter
rpainter@randalllamb.com





mleman -> RE: FTP Client out through ISA (18.Dec.2001 1:51:00 PM)

i have set my isa to allow ftp as well, as it stands at the moment the filter only allows me to use ftp and ftp download. it works fine, when another client machine needs ftp, i log my user and pass in to alloww them to doit, i know what people are downloading then, i would not have thought you would need to use the ftp server option though have you tried configuring it without ftp server and just ftp and ftp download.

works fine through i explorer





rpainter -> RE: FTP Client out through ISA (18.Dec.2001 10:46:00 PM)

Thanks for your reply !
I tried to remove FTP server but it did not help.
I'll take any suggestions!

P.S. Clarification:
Protocaol Access Rule:allow any request for:

FTP
FTP download
FTP server

HELP !





OzTeK -> RE: FTP Client out through ISA (22.Jan.2002 5:22:00 AM)

quote:
Originally posted by rpainter:
Thanks for your reply !
I tried to remove FTP server but it did not help.
I'll take any suggestions!

P.S. Clarification:
Protocaol Access Rule:allow any request for:

FTP
FTP download
FTP server

HELP !


I'm having this same problem. Any help would be appreciated.





coolb4all -> RE: FTP Client out through ISA (22.Jan.2002 11:30:00 AM)

Also still same problem over here, with sp1 and updated fwclient.


That's nr.3 !





tshinder -> RE: FTP Client out through ISA (23.Jan.2002 2:31:00 AM)

Hi Russel,

Can you give some examples of sites you cannot reach? That will help to determine if there's a problem with the Site or if your FTP is whack.

Thanks!
Tom





Page: [1]