RE: Isa server 2004 Internal network can not access ftp site



Hi kalrav,

Thank you for posting in SBS newsgroup.

From the description, I understand the issue to be: you can not access your
FTP site from internal clients using external IP. If I have misunderstood
your concerns, please do not hesitate to let me know.

Can I assume the FTP site is located in the internal network of SBS and you
have server published it to Internet using ISA 2004? If so, I recommend you
access the site using internal IP from internal clients due to if you use
external IP the request will be sent to ISA and then be sent to internal
NIC of SBS by ISA and then be sent to ISA again. It may cause loop and also
it causes network load.

However for the issue, we can try the following steps to see if it helps:

1. Double click the FTP server publishing rule.
2. Click To tab and then select Requests appears to come from the ISA
Server computer under Requests for the published server column.
3. Move the SBS Protected Networks Access Rule to the top of the rules.
4. Try again.

More information:

884580 Active mode FTP client programs cannot access an FTP server from
behind
http://support.microsoft.com/?id=884580

323446 How to configure Internet Explorer to use both the FTP PORT mode and
the
http://support.microsoft.com/?id=323446

When you configure the clients to use FTP PASV Mode, please also configure
ISA to use Passive mode:

300641 HOW TO: Enable Passive CERN FTP Connections Through Internet Security
http://support.microsoft.com/?id=300641

323384 HOW TO: Set Up an FTP Server in Windows Server 2003
http://support.microsoft.com/?id=323384

838243 How to publish a File Transfer Protocol server that is running on an
ISA Server 2004 computer
http://support.microsoft.com/?id=838243

Please feel free to let me know if you have any questions or if you need
further assistance.

I'm looking forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "kaanosh" <kaanosh@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Isa server 2004 Internal network can not access ftp site
| Date: 20 Jun 2006 05:57:21 -0700
| Organization: http://groups.google.com
| Lines: 23
| Message-ID: <1150808241.559476.13460@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 220.225.53.90
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1150808245 18611 127.0.0.1 (20 Jun 2006
12:57:25 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 20 Jun 2006 12:57:25 +0000 (UTC)
| User-Agent: G2/0.2
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
..NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: b68g2000cwa.googlegroups.com; posting-host=220.225.53.90;
| posting-account=dUxsrQ0AAAA5aLxucdyKugo7DSVoIUas
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!newsfeed00
..sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!border1.nntp.dca.
giganews.com!nntp.giganews.com!postnews.google.com!b68g2000cwa.googlegroups.
com!not-for-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:276281
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| hi
|
| i have configured isa server 2004 for ftp allowed on default port 21
|
| My isolated ftp site is accessible from external network but it is not
| accessible from internal network
|
| It connects to site but after it gives error
|
| 227 entering passive mode
| 426 connection closed
|
| But if i try to access it with my local ip it works fine this error
| comes when i try to access with my external ip from internal network.
|
|
| Please help me out.
|
|
| thanks & regardes,
|
| kalrav shah
|
|

.



Relevant Pages

  • RE: Client Computers cannot upload or download from Remote FTP ser
    ... SBS External NIC - Cannot FTP From this server ... SBS Internal NIC ... FTP server is Checked in Routing and Remote Access - Internet Connection - ...
    (microsoft.public.windows.server.sbs)
  • RE: Client Computers cannot upload or download from Remote FTP servers
    ... based) FTP server on SBS and client computers. ... other internet FTP server? ...
    (microsoft.public.windows.server.sbs)
  • Re: FTP client is read only after ISA 2004 removal
    ... Check the clients Internet connection settings and make sure they aren't ... command line and make sure it says direct access (no proxy server). ... Does the IE settings have anything to do with the built-in FTP client ...
    (microsoft.public.windows.server.sbs)
  • RE: FTP Upload
    ... The problem happens from the SBS server and any client on my internal network ... I've been uysing the copmmand line FTP. ... 323446 How to configure Internet Explorer to use both the FTP PORT mode ...
    (microsoft.public.windows.server.sbs)
  • RE: Publishing a FTP server via ISA 2004
    ... strongly recommended to use the wizard to configure the SBS server. ... Is the FTP site hosted on the SBS/ISA Server and listening on port 21? ... If the answer is yes, please open the ISA management console, navigate to ...
    (microsoft.public.windows.server.sbs)