Re: Publish FTP (IIS6) on Same Machine as ISA
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 15 Jul 2003 12:55:12 -0500
Hi Gabriel,
Yes, it could be. Use the primary IP address. I'm believe this problem
was fixed when publishing FTP servers on the internal network, but I
don't know about when the firewall is configured as an FTP server.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Tuesday, July 15, 2003 12:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Ok, tried with PASV and the same error.
Could be the problem with more that one IP on the external interface of
the ISA.
And the IP on wich the FTP is published is not the default for outgoing
connections ??
-----Mensaje original-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Enviado el: martes, 15 de julio de 2003 19:26
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Hi Gabriel,
Try using IE or WS-FTP in PASV mode. I recall that there may be an issue
with PORT when the FTP site is running on the firewall.
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Tuesday, July 15, 2003 12:23 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
I^m from a FTP command line on the client.
And I can`t get the dir listing
-----Mensaje original-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Enviado el: martes, 15 de julio de 2003 19:19
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Hi Gabriel,
Are you using PORT or PASV mode?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Tuesday, July 15, 2003 11:38 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Ok, no problem with the art, I`ll write it. :)
But first I need to solve the publishing thing.
According to your 2nd book about ISA.
When it talks about publishing FTP on the same machine.
I make all the steps, including the reg about "EnablePorAttack"
But when I connect from a client I receive "Invalid PORT commmand"
How can I solve this.
Thanks
-----Mensaje original-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Enviado el: martes, 15 de julio de 2003 18:18
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Hi Gabriel,
GREAT! Try it out with NNTP and SMTP. If that works, it should work the
same for the Exchange IMAP4 and POP3 services. You can even write an
article on this for the ISAServer.org site and becomes the hero of tens
of thousands of SBS 2003 Premium edition users!
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Tuesday, July 15, 2003 11:13 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
I figured out how to disable the Socket Pooling of FTP on IIS6 !!
Just using the Metabase Explorer (from IIS6 Resource Kit)
On the path /LM/MSFTPSVC/1
Create a new "DWORD" value "1029" it will automatically populate the
text "DisableSocketPooling" value "1".
And now shows only binding to the IP that should be.
Hope it helps
Gabriel
gabriel@xxxxxxxxxx
-----Mensaje original-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Enviado el: martes, 15 de julio de 2003 17:47
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Hi Gabriel,
Yes, that info is in the public domain, and all the socket pooling stuff
for the W3SVC is at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;331062
But the rest? :-\
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Tuesday, July 15, 2003 10:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
For http this works (extracted from a newsgroup)
----------------------------------------------------
First, install the support tools from the CD.
then try
1) httpcfg query iplisten (this show current binding) - 0.0.0.0
2) httpcfg delete iplisten -i 0.0.0.0
3) httpcfg set iplisten -i <a.b.c.d>
Then 'net stop iisadmin /y' and finally 'net start w3svc'
-----------------------------------------------------
Gabriel
-----Mensaje original-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Enviado el: martes, 15 de julio de 2003 17:21
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Hi Gabriel,
Yes! The socket pooling fix is somewhere hidden in the XML metabase, but
AFAIK, the settings are completely undocumented and not in the public
domain. I find you find them, you'll be a hero, because when SBS 2003
comes out, the premium edition will have ISA 2000 on it, and all heck is
going to break lose when they can't disable socket pooling for
HTTP/FTP/NNTP/POP3/SMTP/IMAP4 :-)
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Tuesday, July 15, 2003 9:47 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
Yes, but the disabling of socket pooling is not like on IIS5.
I found for the HTTP but not for the FTP
-----Mensaje original-----
De: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Enviado el: martes, 15 de julio de 2003 15:27
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Re: Publish FTP (IIS6) on Same Machine as ISA
http://www.ISAserver.org
IIS6 still has socket pooling to deal with.
Also, hav eyou installed hotfix 255 (W2K3 required fixes)?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
http://www.ISAserver.org
Is there aditional problem publishing a FTP on the same machine as ISA.
With the server publishing rules.
Also, the ISA has 2 external Ips :)
I already read about the BUG about it, but as is a IIS6 obviously have
the SP1 of ISA.
But I can`t make work the FTP published server on both Ips.
Thanks
Gabriel
gabriel@xxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
