RE: G6 FTP Uhm..
- From: "Andrew English" <andrew@xxxxxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 25 Mar 2005 13:02:59 -0500
Okay,
If I don't disable the FTP filter I get the following when I login:
[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PORT 192,168,1,200,17,86
[R] 200 Port command successful.
[R] LIST -al
[R] 150 Opening data connection for directory list.
[R] 226 Transfer ok
And nothing appears in the directory window.
If I disable it for argument sake I get the following:
[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PORT 192,168,1,200,17,86
[R] 200 Port command successful.
[R] LIST -al
[R] 150 Opening data connection for directory list.
And that's it! :)
Andrew
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, March 25, 2005 12:29 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: G6 FTP Uhm..
http://www.ISAserver.org
Ok; maybe I wasn't clear the first time:
DON'T
DISABLE
THE
FTP
APPLICATION
FILTER
..you need this for non-web-proxy FTP access - LITFA.
You already know that the FTP filter and ISA deliver FTP content from
other servers.
Get a capture and you'll be able to see if the FTP server is
misbehaving.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, March 25, 2005 09:22
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: G6 FTP Uhm..
http://www.ISAserver.org
1. I don't have a capture yet
2. If I disable the filter the problem gets worse. It gets to about the
point were its asking for the ls -a on the server side and then hangs
up.
3. the client is hard code to ISA via an IP address (secureNAT) and uses
FlashFXP software. I have tried to download and install other clients
and gotten the same results.
Andrew
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, March 25, 2005 12:11 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: G6 FTP Uhm..
http://www.ISAserver.org
Got captures?
There's a known issue with FTP servers that insist on violating RFC by
trying to make the data connection using a source port other than
<control-1>.
If other FTP servers are accessible via ISA, the problem is likely to be
the upstream server itself.
Disabling the FTP app filter is only going to make the problem worse.
What sort of client - CERN proxy app - Winsock app, etc.?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, March 25, 2005 08:51
To: [ISAserver.org Discussion List]
Subject: [isalist] G6 FTP Uhm..
http://www.ISAserver.org
You guys and gals may find this a bit weird.
I have a client who uses ISA 2004 Server that is trying to connect to a
FTP server running G6 FTP Pro. When they connect they are able to get as
far as the directory transfer which says okay but nothing shows up in
their server site window on their FTP client software.
Here's were it gets weird. ISA 2004 is setup correctly because the same
client can FTP to sites like Microsoft, and Netscape without any
problems it's only when they try to FTP to G6 FTP Pro servers that it
doesn't work.
Now if we move the machine to front end of the ISA 2004 (on DMZ) the
client can access G6 FTP servers without any problems.
On the server site the user has turned PASV mode off.
So what do you make of this? I have made sure that Filtering for FTP on
the client/ISA 2004 server is removed. But honestly if he works on other
sites and not G6 uhm I don't know...
Andrew
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
andrew@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
andrew@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
