Re: ISA prevents downloading thru ftp
- From: "Bogdan Florin" <florinb@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 03 Jan 2002 15:12:32 +0200
If we enable the IP PACKET FILTERING than we receive a stupid error in
EVENT LOG :
Firewall cannot create a packet filter for ip .............
And we have trouble again.
I installed ISa in integrated mode because it offer me bandwidth
prioritization for customers inside ISA ! I have only real IP in my
entire network !
I use ISA only for CACHE ! but if you install ISa in CACHE ONLY you will
not be able to create different service quality for different users.
-----Original Message-----
From: "cismic" <cismic@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Thu, 3 Jan 2002 01:00:12 -0800
Subject: [isalist] Re: ISA prevents downloading thru ftp
> http://www.ISAserver.org
>
>
> I'm sure that you have already tried the following. Just a re-mention
> from MS Support.
> File Transfer Protocol (FTP) uses the secondary connection over port 20
> to transfer data. Because the primary connection is enabled only if the
> requirements for all applicable rules are met, and the secondary
> connection is established only after the primary connection is
> established, there is no need to inspect the traffic for this
> connection
>
> Name: FTP Server TCP 20 Local
> Allow Packet Transmission
> Custom:
> IP Protocol: TCP
> Direction: Outbound
> Local port: Fixed port
> Port number: 20
> Remote port: All ports
>
> Name: FTP Server TCP 21 Local
> Allow Packet Transmission
> Custom:
> IP Protocol: TCP
> Direction: Outbound
> Local port: Fixed port
> Port number: 21
> Remote port: All ports
>
> Also try the following if you've not set things up yet.
> Start the ISA Management utility.
> Open the array node whose behavior you want to change by clicking the
> array node's name.
> Open the Access Policy node.
> Right-click the IP Packet Filters folder, and then click Properties .
> On the General tab, click to select the Enable Packet filtering and
> Enable IP routing check boxes.
>
> Joseph
>
> -----Original Message-----
> From: Bogdan Florin [mailto:florinb@xxxxxxxxxxx]
> Sent: Wednesday, January 02, 2002 11:09 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: ISA prevents downloading thru ftp
>
>
> http://www.ISAserver.org
>
>
> hmmm.
> not good.
>
> Bogdan
> BizarNet
>
> -----Original Message-----
> From: Dar Scott <dsc@xxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Date: Wed, 2 Jan 2002 23:48:01 -0700
> Subject: [isalist] Re: ISA prevents downloading thru ftp
>
> > http://www.ISAserver.org
> >
> >
> >
> > Some ftp sites won't allow a download if they cannot do a reverse DNS
> > on your IP address.
> >
> > Dar Scott
> >
> >
> > >I have the same issue of not being able to download files through
> ftp
> > b/c
> > >of ISA Server. From looking at the website it appears that a number
> > >of other people do too. I phoned Microsoft Product Support Services
> > >as
> > you
> > >suggested, but the technician I spoke with was not familiar with
> this
>
> > >particular hotfix and wanted to charge me $245 to connect me to
> > someone at
> > >Microsoft who could give me the hotfix #! Could you send me the
> > >name/number of the fix please? They won't give me ISA Server SP1
> beta
>
> > >either without this hotfix number.
> > >
> > >To make sure we are on the same wavelength, here is more detail on
> my
>
> > >company's issue with ISA server: Whenever anyone tries to download a
> > file
> > >from a site the download now fails if ftp is involved. I can
> download
>
> > >files fine thru FTP from a computer not behind ISA server.
> > >
> > >For example I went today to 3com and tried to download a NIC driver.
> > >I started at a http site but the download involved an ftp site and
> so
> > the
> > >site timed out. I found a workaround from an article on this issue
> at
>
> > >google groups. I put in the ftp site in the url field directly and
> > then
> > >on the page that showed the download I right clicked the file and
> > chose
> > >"copy to folder." With this method the ftp download worked. But if I
> > just
> > >doubleclick on the file to download while at the http site and do a
> > normal
> > >download (that required Internet Explorer changing over to the ftp
> > site in
> > >the background), the download fails.
> > >
> > >Thanks for your help! FYI, the article by Tom Schnider on Internet
> > >Explorer and FTP is interesting but does not resolve this issue.
> > >http://www.isaserver.org/shinder/tips/ie_and_ftp.htm
> > >
> > >Richard Boyce
> > >seerjboyce@xxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
> as:
>
> > florinb@xxxxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> cismic@xxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> florinb@xxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
Other related posts:
