RE: FTP Connection

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 20 Apr 2005 04:58:04 -0500

Hi Arjan,

All ISA firewalls in the path need to be configured as firewalls in
order to do FTP uploads. If you use a Web proxy in the path, then no
upload.

If a Web proxy client sends a FTP request an an HTTP tunneled (Web
proxied) connection, then no uploads.

HTH, 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: AHendriks@xxxxxx [mailto:AHendriks@xxxxxx] 
Sent: Wednesday, April 20, 2005 4:51 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FTP Connection

http://www.ISAserver.org

Tom,

So i can use the current template and add a second nic with a different
network id, configure the added NIC as the outbound connenction, the
rule for ftp is already configured for the ftp download by users.

So after this the ftp uploads works.

Is ISA listning at port 21 for ftp connections, or is ISA using ftp over
http ?

Correct me if i'm wrong, with a single nic and with the single nic
template i'm unable to allow users to do ftp uploads.

A lot of questions, but about ftp i'm unable to find enough information.

Arjan



> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
> Sent: dinsdag 19 april 2005 12:12
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: FTP Connection
> 
> http://www.ISAserver.org
> 
> Hi Arjan,
> 
> In order to do FTP upload:
> 
> 1. Two NICs on different network IDs
> 2. FTP Access Rule
> 
> HTH,
> 
> 
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
> 
> -----Original Message-----
> From: AHendriks@xxxxxx [mailto:AHendriks@xxxxxx]
> Sent: Tuesday, April 19, 2005 5:07 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: FTP Connection
> 
> http://www.ISAserver.org
> 
> Okay Thomas, tomorrow i'm updating the server with SP1, and 
> will change the template to the Single NIC template.
> 
> What do i need to configure on the ISA firewall to enable FTP 
> upload, can't find anything about it.
> 
> ARjan
> 
> > -----Original Message-----
> > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> > Sent: dinsdag 19 april 2005 12:03
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: FTP Connection
> > 
> > http://www.ISAserver.org
> > 
> > Hi Arjan,
> > 
> > Single NIC doesn't work with the Edge template, you'll need 
> to use the 
> > single NIC template.
> > 
> > You'll need to configure the ISA firewall to do FTP upload. 
> I can help 
> > your PIX guys get a good price on eBay for their PIX packet 
> filters, 
> > then they can take a break, have a nice dinner, and not 
> have to worry 
> > about the security risks they're putting your company at by 
> beliveing 
> > in the illusion of PIX :-)
> > 
> > HTH,
> > 
> > 
> > Tom
> > www.isaserver.org/shinder
> > Tom and Deb Shinder's Configuring ISA Server 2004
> > http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> > 
> > 
> > -----Original Message-----
> > From: AHendriks@xxxxxx [mailto:AHendriks@xxxxxx]
> > Sent: Tuesday, April 19, 2005 4:57 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: FTP Connection
> > 
> > http://www.ISAserver.org
> > 
> > 
> > 
> > The server in the DMZ is currently running ISA with IWSS from Trend 
> > for virus scanning, at the moment the child ISA server in 
> the corpnet 
> > is connecting to the IWSS server, which have a connection to the 
> > outside.
> > ISA is used on the server in the DMZ for server protection 
> only, the 
> > proxy capabilities are not used, IWSS should not have any problems 
> > with this configuration.
> > At the moment the firewall service is configured so that all trafic 
> > from the ISA in the corpnet have full access to all 
> destinations, with 
> > all protocols.
> > 
> > The server in the LAN is running SurfControl, but i think 
> that won't 
> > keeps me from running FTP sessions, all users need authentication 
> > before they can acces the internet, FTP is regulated to.
> > 
> > Both servers use the "Edge Firewall" template, the have 
> both one NIC 
> > connected, ftp downloads work well with IE, not any other 
> ftp client, 
> > i have tested.
> > 
> > But is it possible to enable FTP uploads through ISA, i'm 
> doing a lot 
> > of work, but when it's impossible to enable FTP uploads, 
> it's all for 
> > nothing.
> > 
> > Arjan
> > 
> > > -----Original Message-----
> > > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> > > Sent: maandag 18 april 2005 14:28
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: FTP Connection
> > > 
> > > http://www.ISAserver.org
> > > 
> > > Hi Arjan,
> > > 
> > > I understand, I deal with these "flat earthers" a lot myself :)
> > > 
> > > If you remove the ISA firewall in the DMZ, you can use 
> the back-end 
> > > ISA firewall for FTP uploads and downloads.
> > > 
> > > HTH,
> > > 
> > > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: 
> http://www.windowsnetworking.com Leading 
> > Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: 
> http://www.msexchange.org Windows 
> > Security Resource Site:
> > http://www.windowsecurity.com/ Network Security Library: 
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as:
> > tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: 
> http://www.windowsnetworking.com Leading 
> > Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: 
> http://www.msexchange.org Windows 
> > Security Resource Site:
> > http://www.windowsecurity.com/ Network Security Library: 
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as: 
> > ahendriks@xxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: ahendriks@xxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: