[isalist] Re: FTP upload to an External network using command-line ftp tool

  • From: "Crockett, Gregory" <Gregory.Crockett@xxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 3 Mar 2008 17:00:57 -0600

http://www.ISAserver.org
-------------------------------------------------------
  
I can not list the current dir, upload/dload files. The client,
Microsoft ftp, just sits there and finally I would receive "Connection
closed by remote host".  I get the same response from ftp.microsoft.com.
The ISA logs display only the initial log on activity. 

TIA


Original Client IP      Client Agent    Authenticated Client    Service
Server Name     Referring Server        Destination Host Name   MIME
Type    Source Proxy    Destination Proxy       Client Host Name
Network Interface       Raw IP Header   Raw Payload     GMT Log Time
Source Port     Processing Time Cache Information       Log Record Type
Authentication Server   Bidirectional   Log Time        Client IP
Destination IP  Result Code     Error Information       Transport
Rule    Bytes Sent      Bytes Received  Destination Port        Protocol
Action  Client Username Source Network  Destination Network     URL
HTTP Method     HTTP Status Code        Object Source   Filter
Information
192.168.113.99                          ROXY    -               -
3/3/2008 10:16:19 PM    53778   32      0x0     Firewall        -
3/3/2008 4:16:19 PM     192.168.113.99  207.235.12.84   0x0
ERROR_SUCCESS   0x0     TCP     NAF-T Access    0       0       21
FTP     Initiated Connection            Internal        External
-       -                       -
192.168.113.99                          ROXY    -               -
3/3/2008 10:18:00 PM    53778   101282  0x0     Firewall        -
3/3/2008 4:18:00 PM     192.168.113.99  207.235.12.84   0x80074e24
FWX_E_CONNECTION_KILLED 0x0     TCP     NAF-T Access    74      217
21      FTP     Closed Connection               Internal        External
-       -                       -
192.168.113.99                          ROXY    -               -
3/3/2008 10:18:08 PM    53792   31      0x0     Firewall        -
3/3/2008 4:18:08 PM     192.168.113.99  207.235.12.84   0x0
ERROR_SUCCESS   0x0     TCP     NAF-T Access    0       0       21
FTP     Initiated Connection            Internal        External
-       -                       -
192.168.113.99                          ROXY    -               -
3/3/2008 10:19:30 PM    53792   82328   0x0     Firewall        -
3/3/2008 4:19:30 PM     192.168.113.99  207.235.12.84   0x80074e24
FWX_E_CONNECTION_KILLED 0x0     TCP     NAF-T Access    74      217
21      FTP     Closed Connection               Internal        External
-       -                       -
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Monday, March 03, 2008 2:27 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: FTP upload to an External network using
command-line ftp tool

http://www.ISAserver.org
-------------------------------------------------------
  
You can't upload via the web proxy; this is impossible since the Web
proxy doesn't support FTP uploads.
The fact that the browser is working tells me that your browser is
acting like a "native" FTP client; either via SecureNET or FWC.  It also
tells me that your ISA configuration is correct for non-web proxy FTP
through ISA.

Any chance you can elaborate on "doesn't work"?
Exactly what do you see in the cmd-lime ftp tool?
What do you find in the ISA logs for your cmd-line tool tests?

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Crockett, Gregory
Sent: Monday, March 03, 2008 12:00 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] FTP upload to an External network using command-line
ftp tool

The ISA is 2006 SE and EE.


Is the above possible with a SNAT Client or FWC?  I can connect but I
can not upload or dload.  However, I can u/dload with IE with a Web
Proxy Client.  I unchecked 'Read only' box on the FTP filter.  The other
end reports that the server is using ports 20 and 21.  The ISA log never
showed port 20 in use during Web Proxy Client transfers.  I have scoured
the net looking for ways of making this work with ISA 2006 -- I came up
short.



TIA



greg

All mail to and from this domain is scrutinized by the Scrutinizer.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is scrutinized by GFI.


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: