Welcome to ISAserver.org

need to publish FTP on internal network.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Server Publishing >> need to publish FTP on internal network.

Page: [1]

Message

<< Older Topic Newer Topic >>

need to publish FTP on internal network. - 7.Jun.2008 3:39:11 AM

nandagopalrvarma

Posts: 2
Joined: 7.Jun.2008
Status: offline

Hi,

I have an FTP server hosted on an ISA server 2006 computer which is
also a domain controller as well as an SMS 2003 primary site!!! I
know, that's all a whole lot of traffic and though I have this very
delicate setup running ok at present, I decided to move my ISA 2006
site to another server . That went ok and I now have two ISA server
2006 sites.

This is my scenario and my goals
1. FTP should run on the earlier server.
2 .Publish the FTP through the new ISA 2006 site
3. External FTP clients should authenticate on the earler FTP IIS and
dont want to setup IIS on the new ISA 2006.
4.Once everything is working well I want to bring down the old ISA
2006 .

I have already set up the new ISA 2006 and from that box,which has an
internal IP of 10.4.0.16 ,when I FTP to 10.4.0.40 ( FTP site+ISA 2006-
old ) ,the connection goes through but whatever username I type in ,it
says"user cannot login" . I think this might have something to do with
authentication but I am confused whether the authentication is
failing at the new ISA site.

The existing FTP site does not have any apparent authentication
problems at present.

Also I would like to have a better understanding of PORT ,PASV and
FTPing through higher port numbers. Do I need to publish only a NON-
WEB server protocol publishing rule which points to the internal IP
address of my earlier FTP site with FTP SERVER protocol(port 21) do I
also need to add FTP protocol(port 20) .

Do I need to make port 21 and 20 listen on ISA 2006 edge gateway as
well as on the Internally published FTP server.

Thank you.

Regards,
Nandagopal R Varma

Post #: 1

Featured Links*

RE: need to publish FTP on internal network. - 9.Jun.2008 8:04:35 AM

paulo.oliveira

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hello,

see this link: http://technet.microsoft.com/en-us/library/bb794745(TechNet.10).aspx

As far as I know, you only need to publish your FTP server on 21 port and make sure that FTP filter is enabled.
If you don�t wanna to make the FTP server avaliable to the internet, then you shouldn�t publish it on your edge gateway.

Regards,
Paulo Oliveira.

(in reply to nandagopalrvarma)

Post #: 2

RE: need to publish FTP on internal network. - 17.Jun.2008 12:31:15 AM

nandagopalrvarma

Posts: 2
Joined: 7.Jun.2008
Status: offline

Hi Paulo,

Thanks for the reply. I understand only port 21 needs to be opened and FTP application filter enabled and that was the first thing I ever did . As for publishing it to the Internet I need that and I have given a public IP address to one of its network adapters.

what I did was RUN>cmd> ftp 10.4.0.16 ( this is the new ISA server)
which shows me the login screen for the IIS on the ISA box that I intend to publish FTP on and not the existing FTP server.

I then disabled IIS on my ISA ,thinking it would authenticate at the existing FTP IIS but somehow that doesnt work out. What am I missing over here. I didnt use IE or any browser to FTP so that no browser problems come into the picture.

Regards,
Nandagopal R Varma

(in reply to paulo.oliveira)

Post #: 3