Just to note-- you also have to clear "Read only" for any access-list that
allows FTP from the *client*. Even if the Server Pub rule has this
cleared, if you have an access-rule specifying it, they can't upload.
Interesting point here-- it seems that regardless of what rules you have,
you can't upload from the ISA box itself. I've been testing this since we
were talking about it- I can write to the dir from the FTP server itself,
and from clients behind the ISA box to the FTP server, but not from the ISA
server itself. I can connect, but when I try to write, it says "Access
Denied."
t
http://www.ISAserver.org
ROFL
dont you just hate it when you get bitten by something that you have been staring at or talking about at the time. its almost as though the thing is hat far in the front of your mind that your eyes dont see it. I was on the verge of ringing my isp and abusing them for something, then i relasied the silly little "read only" tab :( ahhhh nuts :)
Greg Mulholland
________________________________
From: Greg Mulholland [mailto:greg@xxxxxxxxxxxxxx] Sent: Monday, December 05, 2005 7:39 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: FTP not getting read only optin on ISA 2004
http://www.ISAserver.org
OK Follow me, Find the Server Publishing Rule you created under the Firewall Policy. Double Click it, go to the traffic tab, FTP Server should be selected as the protocol in the drop down box. Select the Filtering button on the right hand side and you should then get the option to "Configure FTP", select that and then you should have a radio button to unselect "read only"
Just going back to the original message for a sec, this doesnt seem to be your issue. the "read only" option blocks users from uploading to the FTP server, not connecting. fire up monitoring/logging. then try a connect from outside and see what FTP traffic is being logged. If you really want to edit the log query to show destination port 21.. that will cut out all the other crap out of the log..
Greg Mulholland
________________________________
From: Syed, Mohsin Ali [mailto:SMohsin@xxxxxxxxx] Sent: Monday, December 05, 2005 7:22 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: FTP not getting read only optin on ISA 2004
http://www.ISAserver.org
Hi
Even there also I am not getting
Do you have any idea?
M
________________________________
From: Greg Mulholland [mailto:greg@xxxxxxxxxxxxxx] Sent: Monday, December 05, 2005 10:59 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: FTP not getting read only optin on ISA 2004
http://www.ISAserver.org
Its not there, I was wrong. Go to the FT Access rule under your firewall policy, and right click it, then choose "configure ftp". Its in there and thats the quickest way to get to it
Greg Mulholland
