abn amro maar ook gewoon active ftp

Discussion:

(te oud om op te antwoorden)

Perry Perdijk

2005-10-03 14:35:27 UTC

Hi There,

Ik zag een post over abn amro telebankieren , ik zit hier met hetzelfde
probleem.
Echter dat heeft toch niks te maken met abn , gewoon met isaserver.
Ook als ik gewoon een active ftp wil doen vanaf client(firewall client en
webproxy) dan krijg ik deze melding ":
200 Type set to I.
500 Illegal PORT Command
Ik kan wel een passive sessie opzetten . Waarom is dit? Wat gaat er fout?
het heeft trouwens wel een keer gewerkt.En dan nog iets, indien ik met een
client(2000) ALLEEN firewall client ben en GEEN webproxy client dan krijg ik
deze melding als iik browse : 403 Forbidden - The ISA Server denies the
specified Uniform Resource Locator (URL). (12202)Internet Security and
Acceleration ServerWaarom ?Hoop dat iemand me iets verder kan
helpen.Thxperry

Henk Steunenberg (Ms)

2005-10-05 09:06:53 UTC

Permalink

If you have a rule that is above the [FTP ACCESS] rule that is defined for
ALL
OUTBOUND PROTOCOLS or another allow rule specified for FTP Protocol and in
the
properties of the rule / Configure FTP / READ ONLY box is not un-checked and
these
rules are sequentially ahead of the FTP Access rule that you have unchecked
to
allow POST functionality you will get this behavior.

Check rules to ensure that either the FTP Rule with READ ONLY Unchecked is
top in
the list or that the other rules have removed the READ-ONLY check in the
Configure
FTP Settings.

http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.
html

Post by Perry Perdijk
Hi There,
Ik zag een post over abn amro telebankieren , ik zit hier met hetzelfde
probleem.
Echter dat heeft toch niks te maken met abn , gewoon met isaserver.
Ook als ik gewoon een active ftp wil doen vanaf client(firewall client en
200 Type set to I.
500 Illegal PORT Command
Ik kan wel een passive sessie opzetten . Waarom is dit? Wat gaat er fout?
het heeft trouwens wel een keer gewerkt.En dan nog iets, indien ik met een
client(2000) ALLEEN firewall client ben en GEEN webproxy client dan krijg ik
deze melding als iik browse : 403 Forbidden - The ISA Server denies the
specified Uniform Resource Locator (URL). (12202)Internet Security and
Acceleration ServerWaarom ?Hoop dat iemand me iets verder kan
helpen.Thxperry

Perry

2005-10-05 16:29:03 UTC

Permalink

Hi

IŽm running isa2000 on a windows 2000 box.
So the read only option is not availeble.
It is also when i have only 1 rule , allowing all traffic to everywhere.

perry

Post by Henk Steunenberg (Ms)
If you have a rule that is above the [FTP ACCESS] rule that is defined for
ALL
OUTBOUND PROTOCOLS or another allow rule specified for FTP Protocol and in
the
properties of the rule / Configure FTP / READ ONLY box is not un-checked
and these
rules are sequentially ahead of the FTP Access rule that you have
unchecked to
allow POST functionality you will get this behavior.
Check rules to ensure that either the FTP Rule with READ ONLY Unchecked is
top in
the list or that the other rules have removed the READ-ONLY check in the
Configure
FTP Settings.
http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.
html

Henk Steunenberg (Ms)

2005-10-07 14:08:21 UTC

Permalink

ISA by default will only make an ftp connection using PORT mode (Active
mode) ftp
regardless of what mode the client behind ISA is using. If the devices
outside of
ISA (routers or other firwewalls) don't support active mode ftp, the ftp
connection
may fail

Forcing ISA to use passive mode ftp should correct this problem as passive
mode ftp
is universally compatible. To force ISA to use passive mode, make the
following
registry change:

HKLM\System\CCS\services\W3Proxy\Parameters
Change the reg_dword value NonPassiveFTPTransfer to 0 and restart the Web
Proxy
Service.

Post by Perry
Hi
IŽm running isa2000 on a windows 2000 box.
So the read only option is not availeble.
It is also when i have only 1 rule , allowing all traffic to everywhere.
perry

Post by Henk Steunenberg (Ms)
If you have a rule that is above the [FTP ACCESS] rule that is defined
for ALL
OUTBOUND PROTOCOLS or another allow rule specified for FTP Protocol and
in the
properties of the rule / Configure FTP / READ ONLY box is not un-checked
and these
rules are sequentially ahead of the FTP Access rule that you have
unchecked to
allow POST functionality you will get this behavior.
Check rules to ensure that either the FTP Rule with READ ONLY Unchecked
is top in
the list or that the other rules have removed the READ-ONLY check in the
Configure
FTP Settings.
http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.
html

Jetze Mellema (MS MVP)

2005-10-10 06:00:16 UTC

Permalink

Post by Henk Steunenberg (Ms)
Forcing ISA to use passive mode ftp should correct this problem as
passive mode ftp
is universally compatible. To force ISA to use passive mode, make the
following

Het probleem is juist dat active FTP niet werkt bij de vraagsteller.

--
Met vriendelijke groet,

Jetze Mellema (MS MVP)
http://www.mellema.net/homecomputers

Perry Perdijk

2005-10-12 13:45:04 UTC

Permalink

Inderdaad, ik ben er nog steeds niet uit...

Post by Jetze Mellema (MS MVP)

Post by Henk Steunenberg (Ms)
Forcing ISA to use passive mode ftp should correct this problem as
passive mode ftp
is universally compatible. To force ISA to use passive mode, make the
following

Het probleem is juist dat active FTP niet werkt bij de vraagsteller.
--
Met vriendelijke groet,
Jetze Mellema (MS MVP)
http://www.mellema.net/homecomputers