RE: FTP over VPN
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 27 Feb 2006 15:23:19 -0600
Hi Amy,
Is the tunnel even up yet?
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Monday, February 27, 2006 12:58 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FTP over VPN
http://www.ISAserver.org
Hmmm...only the server needs to use this gateway. SBS servers are web
proxy clients. But this traffic is being routed over the VPN tunnel and
there are no web browser settings in that rule or for localhost network.
Amy
Harbor Computer Services
Small Business Computer Specialists
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Monday, February 27, 2006 1:45 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FTP over VPN
http://www.ISAserver.org
Hi Amy,
The remote site should be set for Direct Access. Otherwise, the Web
proxy filter intercepts the request.
HTH,
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Monday, February 27, 2006 12:31 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] FTP over VPN
http://www.ISAserver.org
I'm setting my first VPN gateway. The client needs to send FTP over the
Gateway to another company. I'm getting an error message that the proxy
is set for read-only. I've unchecked the read only box on the VPN rule.
I'm still getting this message. Here's what the log says.
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name
Transport MIME Type Object Source Source Proxy
Destination Proxy Bidirectional Client Host Name Filter
Information Network Interface Raw IP Header Raw Payload
Source Port Processing Time Bytes Sent Bytes Received HTTP
Status Code Cache Information Error Information Log
Record Type Destination IP Action Rule Client IP Client
Username URL Source Network Protocol Destination Port
Destination Network HTTP Method Log Time Result Code
0.0.0.0 SBS2003 - TCP -
No - 33544 20922 0
0 0x0 0x0 Firewall 198.133.250.19 Failed
Connection Attempt GXS FTP out Rule 10.1.10.40
- Local Host FTP 21 GXS VPN - 2/27/2006
1:34:45 PM 0x8007274c
0.0.0.0 Microsoft(r) Windows(tm) FTP Folder No Proxy SBS2003
198.133.250.19 TCP Internet - -
- - - - 0 21000 4496 112
10060 0x0 0x40 Web Proxy Filter 198.133.250.19 Failed
Connection Attempt GXS FTP out Rule 192.168.16.2
anonymous ftp://198.133.250.19/ Local Host ftp 21
GXS VPN GET 2/27/2006 1:35:06 PM
What am I missing?
Thanks,
Amy
Harbor Computer Services
Small Business Computer Specialists
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Thursday, February 16, 2006 10:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Wireless Access and ISA 2004
http://www.ISAserver.org
Hi Tom,
That's a pretty interesting question. Have you enabled all RPC outbound
to the user's Exchange Server? I'm assuming that you're talking about
Outlook MAPI connections.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx]
Sent: Thursday, February 16, 2006 9:44 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Wireless Access and ISA 2004
http://www.ISAserver.org
I have a guest on my network, who says that any wireless network he
connects to, at hotels for instance, can use Outlook to grab his email.
I
setup guest Internet access for him today, but the mail servers cannot
be
accessed through our ISA 2004 server. I tried to Telnet with no luck.
Now
with my desktop PC that is part of my domain, I have no trouble. I have
the Firewall Client installed. I tried to install the FW Client on the
guest PC, but it still did not work. If the guest is able to connect to
the Internet, shouldn't we be able to telnet to the mail server?
I just upgraded to ISA 2004 yesterday, so I'm sure something is not set
right, but am not sure what it could be, because I am allowing all
protocols access at this point.
Any advice? TIA,
-Tom Rogers
ISA 2004 Rookie
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
