Re: FTP via ISA Server 2000

From: Mohammed A. Raslan (m_raslan_at_link.net.removethis)
Date: 12/22/04


Date: Wed, 22 Dec 2004 18:51:51 +0300

If you have any sites in the exception list, for example *.microsoft.com,
this means that you are instructing IE *not* to your its configured proxy
server when accessing this site by HTTP or FTP, IE would access it directly.
Other sites however will use the proxy. In my exmaple, if you try to access
ftp.microsoft.com, then IE *will not* use the proxy server, however if you
access ftp.symantec.com, then IE *will* use the proxy server

-- 
Yours truly,
Mohammed A. Raslan
Systems Engineer / Consultant
MCSE+I NT4, MCSA: Security , MCSE: Security, MCDBA, CCNA
Mobile: +20 (12) 36 26 112 / +965 978 1969
E-Mail: m_raslan@link.net.removethis
"rodders" <rodders@discussions.microsoft.com> wrote in message
news:C17BA62F-CA4F-40FB-AE39-7DB8D4D977EC@microsoft.com...
> Mohammed, (or anyone else !)
>
> Many thanks for your reply, I really appreciate it. Are you saying that if
> there are any exceptions listed in the browser then FTP behaves this way ?
So
> if I have *.acme.com in the exceptions and I am trying to get to
> *.bloggs.com, the FTP to bloggs.com will fail ?
>
> Thanks for all your help,
>
> Brian.
>
> "Mohammed A. Raslan" wrote:
>
> > Ok if you have users accessing FTP servers through IE, IE must be
configured
> > to use ISA as Proxy, and there should not be any sites in the exceptions
> > list. If IE is not setup this way, it will communicate directly with the
FTP
> > server
> >
> > If you use programs like CuteFTP or FTP Explorer, they by default won't
use
> > ISA and will communicate with the FTP server directly, some programs
however
> > have the option to specifiy a Proxy server and port so they can use
them.
> >
> > To test whether your application is using the Proxy or communicating
> > directly with the FTP server, you can open a connection with any ftp
server,
> > ftp.microsoft.com for example and while its open, open a command prompt
at
> > the client and type "netstat" and check the outgoing connections, if you
are
> > using Proxy, then you should find a conection to ftp.microsoft.com or
their
> > IP on port 8080 by default. to make things easy, log of the client
machine
> > and then log on again and open only 1 window to the FTP server so that
you
> > don't have too many entries in the netstat result.
> >
> > Active and Passive FTP modes has nothing to do with your problem. so
don't
> > worry about it
> >
> > -- 
> > Yours truly,
> > Mohammed A. Raslan
> > Systems Engineer / Consultant
> > MCSE+I NT4, MCSA: Security , MCSE: Security, MCDBA, CCNA
> > Mobile: +20 (12) 36 26 112 / +965 978 1969
> > E-Mail: m_raslan@link.net.removethis
> >
> >
> > "rodders" <rodders@discussions.microsoft.com> wrote in message
> > news:6C7535C5-351E-4A1D-8F24-BF920775FDEB@microsoft.com...
> > > Thanks for your reply. The users are using FTP from IE on the desktop,
and
> > > the exceptions are configured correctly. Any further ideas ?
> > >
> > > Brian.
> > >
> > > "Mohammed A. Raslan" wrote:
> > >
> > > > If ISA2000 is installed in cache only mode, then you can only use a
> > browser
> > > > or an FTP client program that communicates with FTP servers through
> > proxy
> > > > configuration, using ftp.exe for example will not go through ISA at
all.
> > > >
> > > > -- 
> > > > Yours truly,
> > > > Mohammed A. Raslan
> > > > Systems Engineer / Consultant
> > > > MCSE+I NT4, MCSA: Security , MCSE: Security, MCDBA, CCNA
> > > > Mobile: +20 (12) 36 26 112 / +965 978 1969
> > > > E-Mail: m_raslan@link.net.removethis
> > > >
> > > >
> > > > "rodders" <rodders@discussions.microsoft.com> wrote in message
> > > > news:700E95BE-930A-4727-A7A5-95BB5AD4A73F@microsoft.com...
> > > > > Hi,
> > > > > Hope someone can help me here - I have ISA Server 2000 FP1 SP2
running
> > in
> > > > > cache mode only and we have noticed that FTP requests from
internal
> > > > clients
> > > > > to the outside world are not being serviced by the proxy server
but
> > are
> > > > being
> > > > > redirected if an alternative route exists.
> > > > >
> > > > > Can anyone explain why this is happening or what I can check ? I
have
> > been
> > > > > reading a lot about passive and active FTP and wonder if it is
related
> > to
> > > > the
> > > > > fact that the ISA server only supports port 21, and seeing as I am
> > running
> > > > in
> > > > > cache mode, I can't define any more protocols.
> > > > >
> > > > > Thanks for your help.
> > > > >
> > > > > Brian.
> > > >
> > > >
> > > >
> >
> >
> >


Relevant Pages

  • Re: frontpage publishing error
    ... For a Microsoft FrontPage 2000 version of this article, ... A web does not exist at 'ftp location'. ... Could not find a web server at 'ftp location'. ... that the web server name is valid and your proxy settings are set correctly. ...
    (microsoft.public.frontpage.programming)
  • Re: bypassing a proxy server
    ... > up a FreeBSD machine on a school's network. ... > server. ... > ftp server. ... through the proxy server. ...
    (freebsd-questions)
  • Re: Cant access FTP sites requiring authentication
    ... Error Code: 502 Proxy Error. ... Server: MAIN.mobital.local ... external FTP site by using passive FTP functionality: "Error Code: 502 Proxy ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot Access FTP or Company Website (Externally Hosted) - HELP!!!
    ... disabled the proxy but were still getting proxey server messages. ... Check the Outbound FTP Rule and make sure that its set to Allow and not deny ... So I went to SBS Protected Networks Access Rule, ...
    (microsoft.public.windows.server.sbs)
  • RE: Patching internet facing MS systems
    ... automatic updates as exceptions? ... with a proxy server setting of 127.0.0.1:. ... Then providing a short list of proxy exceptions in IE ... there are other ways to make the web server ...
    (Security-Basics)