Re: Losing my rag with ISA and CA ETrust
From: Andrew H (ajhpms_at_hotmail.com)
Date: 10/29/04
- Next message: Gordon Ryan: "Re: 'Applying your personal settings' takes too long to complete"
- Previous message: Frank McCallister SBS MVP: "Re: LAN ?"
- In reply to: Tim \(Newsgroups\): "Re: Losing my rag with ISA and CA ETrust"
- Next in thread: Steve Foster [SBS MVP]: "Re: Losing my rag with ISA and CA ETrust"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 29 Oct 2004 14:34:53 +0200
I just tried ftp.microsoft.com myself, and got the same result of a hang the
first time, but it worked the second.(I did have to grant ftp.exe the right
to exit the workstation's XP SP2 firewall). Perhaps what you saw isn't
part of your problem. Give ftpav.ca.com a shot while you're at it.
How about creating an "allow" protocol rule in ISA for ftp for yourself, or
all users for testing purposes?
"Tim (Newsgroups)" <tim_hames@hotmail.com> wrote in message
news:%23Qh$ZXavEHA.3976@TK2MSFTNGP09.phx.gbl...
> Thanks Andrew I'll do that.
>
> I've tried just making an ftp connection to ftp.microsoft.com from the
> command prompt with no luck.
>
> I can make the connection OK and authenticate using anonymous but when I
> type ls, the connection times out (see below).
>
> ftp> open ftp.microsoft.com
> Connected to ftp.microsoft.com.
> 220 Microsoft FTP Service
> User (ftp.microsoft.com:(none)): anonymous
> 331 Anonymous access allowed, send identity (e-mail name) as password.
> Password:
> 230-This is FTP.Microsoft.Com
> 230 Anonymous user logged in.
> ftp> ls
> 200 PORT command successful.
> 150 Opening ASCII mode data connection for file list.
>
> .....and then it hangs or just times out.
>
> Thanks again for all your assistance
>
> Kind Regards
>
> Tim
>
> "Andrew H" <ajhpms@hotmail.com> wrote in message
> news:OqAvZfZvEHA.3916@TK2MSFTNGP10.phx.gbl...
>> I'm running out of suggestions. If this is a general problem with ftp
>> and ISA, and not just with CA eTrust, you're not going to get much help
>> from CA either. Hop over to the microsoft.public.isa newsgroup for
>> further suggestions?
>>
>>
>> "Tim (Newsgroups)" <tim_hames@hotmail.com> wrote in message
>> news:Orm0nHUvEHA.3228@TK2MSFTNGP12.phx.gbl...
>>> Hi Andrew and Steve
>>>
>>> I've disabled IP Packet filtering and............ the problem is still
>>> there. Exactly the same ISA server times out. So....it does not appear
>>> to be a packet filtering issue.
>>>
>>> I've checked the FTP Access Filter in ISA Extensions and everything
>>> appears in order (I've never touched it).
>>>
>>> So why is ISA still blocking access? Could there be a protocol rule
>>> which has got corrupted in some way?
>>>
>>> The other possibility is that the AV itself has managed to corrupt
>>> itself. I'll try uninstalling then re-installing the AV software to see
>>> if that makes a difference.
>>>
>>> Really grateful for your help and perseverance.
>>>
>>> Kind Regards
>>>
>>> Tim
>>>
>>> "Andrew H" <ajhpms@hotmail.com> wrote in message
>>> news:OjbelTAvEHA.908@TK2MSFTNGP11.phx.gbl...
>>>> Tim, have you checked the FTP Access Filter in ISA Extensions,
>>>> Application Filters?
>>>>
>>>>
>>>>
>>>> "Andrew H" <ajhpms@hotmail.com> wrote in message
>>>> news:eUlB2K1uEHA.2684@TK2MSFTNGP12.phx.gbl...
>>>>> If you disable packet filtering (right click on IP Packet Filters
>>>>> under ISA admin access policy, properties, then uncheck "enable packet
>>>>> filtering", then restart the firewall service), then ISA shouldn't
>>>>> block ftp traffic - or if it does, it's not a packet filtering
>>>>> problem. Running the CEICW wizard isn't required. You just want to
>>>>> turn off filtering for a once-off test, and turn packet filtering on
>>>>> again.
>>>>>
>>>>> "Tim (Newsgroups)" <tim_hames@hotmail.com> wrote in message
>>>>> news:eE4n5DuuEHA.1524@TK2MSFTNGP09.phx.gbl...
>>>>>> Thanks Steve. I'll try that.
>>>>>>
>>>>>> Hi Andrew - I have disabled the packet filters for testing but then
>>>>>> no ftp traffic gets in or out. I guess you mean that I should run the
>>>>>> CEICW again and allow ftp traffic. I was hoping to avoid that.....
>>>>>> Or do you mean configure an ftp packet filter which allows all ftp
>>>>>> traffic in or out?
>>>>>>
>>>>>> What I don't understand is what has changed? The original packet
>>>>>> filters were working fine until the end of September.
>>>>>>
>>>>>> CA have not responded to my e-support call..............
>>>>>>
>>>>>> Kind Regards
>>>>>>
>>>>>> Tim
>>>>>>
>>>>>>
>>>>>> "Andrew H" <ajhpms@hotmail.com> wrote in message
>>>>>> news:%23pXkXumuEHA.3900@tk2msftngp13.phx.gbl...
>>>>>>> Tim, have you tried disabling packet filters for testing (turn them
>>>>>>> on again afterwards, obviously)?
>>>>>>>
>>>>>>>
>>>>>>> "Tim (Newsgroups)" <tim_hames@hotmail.com> wrote in message
>>>>>>> news:uJsjTSLuEHA.1356@TK2MSFTNGP11.phx.gbl...
>>>>>>>> Yes Steve I did. I've even rebooted.
>>>>>>>>
>>>>>>>> Is there anything else I should check?
>>>>>>>>
>>>>>>>>
>>>>>>>> "Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> wrote in
>>>>>>>> message news:xn0dotrkb84dpyx000@msnews.microsoft.com...
>>>>>>>>> Tim (Newsgroups) wrote:
>>>>>>>>>
>>>>>>>>>> Hi Steve - thanks for helping me troubleshoot this one. I'm still
>>>>>>>>>> learning ISA.
>>>>>>>>>>
>>>>>>>>>> OK I tried swapping the Custom Filter's over. Here is the extract
>>>>>>>>>> from IPEXTD20041022.log:
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Did you restart the ISA services?
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> Steve Foster [SBS MVP]
>>>>>>>>> ---------------------------------------
>>>>>>>>> MVPs do not work for Microsoft. Please reply only to the
>>>>>>>>> newsgroups.
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
- Next message: Gordon Ryan: "Re: 'Applying your personal settings' takes too long to complete"
- Previous message: Frank McCallister SBS MVP: "Re: LAN ?"
- In reply to: Tim \(Newsgroups\): "Re: Losing my rag with ISA and CA ETrust"
- Next in thread: Steve Foster [SBS MVP]: "Re: Losing my rag with ISA and CA ETrust"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
