RE: Trouble: FTP and ISA behind a load-balancer

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 25 Jan 2006 19:13:54 -0800

Gee - this sounds familiar. 
You wouldn't happen to have a case with PSS, would you?

Don't configure your FTP client to "simulate" the external IP.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Fernando Monteiro [mailto:fernandolistas@xxxxxxxxx] 
Sent: Wednesday, January 25, 2006 19:09
To: [ISAserver.org Discussion List]
Subject: [isalist] Trouble: FTP and ISA behind a load-balancer

http://www.ISAserver.org


Hello, 

I've an interesting question. My setup is:

2 cable modem connections (real IP)
 |
 |
Linksys RV042 load balancer
 | 10.0.0.1
 |
 |
 | 10.0.0.2
ISA Server 2004
 | 192.168.10.1
 |
 |
 | 192.168.10.10
FTP Server (DMZ host)


Everything seems to be working fine but FTP. When an external client tries to 
connect to internal, published FTP server, there's something wrong when FTP 
tries to open the second channel and return to FTP client the requested data. 

FTP client shows me something like "opening PASV connection 10.0.0.2,6345". It 
seems that ISA is sending its configured external address. Is this a webproxy 
problem influencing the method that FTP server interprets addresses from 
clients ? 

The only client I could use to connect is CuteFTP, it recognizes 10.0.0.2 as  
an internal address and it automatically "translate" it to the right IP, tha t 
is used by the first connection.

Has someone have a solution for this problem ? 

Thanks in advance,

Fernando Monteiro






------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: