[isalist] Re: FTP without client and another default gateway
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Mon, 17 Apr 2006 14:47:18 -0700
Am I not being clear?
Even if you configure it otherwise, if IE can choose to make a direct
connection, it will.
Choices:
1. Give that host a DNS server that cannot resolve the FQDN and IE will use the
proxy.
2. Block this host at the other firewall
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Elton Gouvêa Pimentel
Sent: Mon 4/17/2006 10:57 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: FTP without client and another default gateway
Ok.
The scenario is :
We are using the FQDN and the client can resolve the name to the external IP.
This is due to the fact that one of my DNS servers is capable of resolving
external names.
Have you got any clues ?
Thanks,
Elton Pimentel.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, April 17, 2006 2:41 PM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: FTP without client and another default gateway
Yes, I did.
I also gave you a scenario where IE will choose *not* to use teh proxy, even if
it's configured to do so.
Q1 - are you making the connection using IP addresses, simple names or FQDN?
Q2 - if simple name or FQDN, can the client directly resolve the name to the
external IP?
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Elton Gouvêa Pimentel
Sent: Mon 4/17/2006 10:34 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: FTP without client and another default gateway
I don´t think that you got the idea. I wnat to control all the FTP trafic using
my ISA Server. To do so, I have to be able to use FTP via my proxy.
Thanks,
Elton Pimentel.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, April 17, 2006 2:23 PM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] FTP without client and another default gateway
If IE is able to resolve the name or you use an IP address, it *may* attempt
the connection directly.
If this is successful, there's no point in passing it to the proxy.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Elton Gouvêa Pimentel
Sent: Mon 4/17/2006 9:39 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] FTP without client and another default gateway
Hi there,
I have a situation as described below :
My users are not capable of using FTP via IE even when proxy settings are set
for this protocol. I do not use firewall client, and do not intend to do so. I
have a default gateway which is not my ISA Server, as I have another firewall
on my company. My version of ISA server is 2004.
Every time that my users try to acess an FTP site, the client (Internet
Explorer) send the request to my deault gateway. Is there a way to force this
requests to be send to my proxy instaed of sending it to my default gateway ?
Sincerely,
Elton Pimentel.
All mail to and from this domain is GFI-scanned.
Other related posts:
