Hi

Have an SBS server. With two ethernet connections one to
the internet and one to the lan. Server is setup as
standard as it can be. It is utilising the ISA firewall.

The workstations are Windows XP profesional workstations.

Problem is that users cannot FTP to internet sites from
thier workstations as either themselves or administrator.
But you can FTP to the sites directly from the server.

I will openly admit my knowledge is very limited. I have
checked on the ISA server and the ports 20 and 21 in and
out custom filters are there and are allow mode.

Does anyone have any ideas.

With thanks

Re: Users cannot FTP from workstations by Marina

Marina
Tue Dec 09 08:32:19 CST 2003

Got the Firewall Client installed on the workstations?

You don't want the FTP-inbound ports opened on your SBS.

Marina

"Calvin" <anonymous@discussions.microsoft.com> schreef in bericht
news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
> Hi
>
> Have an SBS server. With two ethernet connections one to
> the internet and one to the lan. Server is setup as
> standard as it can be. It is utilising the ISA firewall.
>
> The workstations are Windows XP profesional workstations.
>
> Problem is that users cannot FTP to internet sites from
> thier workstations as either themselves or administrator.
> But you can FTP to the sites directly from the server.
>
> I will openly admit my knowledge is very limited. I have
> checked on the ISA server and the ports 20 and 21 in and
> out custom filters are there and are allow mode.
>
> Does anyone have any ideas.
>
> With thanks



Re: Users cannot FTP from workstations by anonymous

anonymous
Tue Dec 09 10:01:06 CST 2003

Are you talking about the XP firewall client?

If not and there is an ISA firewall client that needs to
be installed upon the workstations. Where do I find the
client to install it on the workstations.

With thanks.

>-----Original Message-----
>Got the Firewall Client installed on the workstations?
>
>You don't want the FTP-inbound ports opened on your SBS.
>
>Marina
>
>"Calvin" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
>> Hi
>>
>> Have an SBS server. With two ethernet connections one
to
>> the internet and one to the lan. Server is setup as
>> standard as it can be. It is utilising the ISA
firewall.
>>
>> The workstations are Windows XP profesional
workstations.
>>
>> Problem is that users cannot FTP to internet sites from
>> thier workstations as either themselves or
administrator.
>> But you can FTP to the sites directly from the server.
>>
>> I will openly admit my knowledge is very limited. I
have
>> checked on the ISA server and the ports 20 and 21 in and
>> out custom filters are there and are allow mode.
>>
>> Does anyone have any ideas.
>>
>> With thanks
>
>
>.
>

Re: Users cannot FTP from workstations by Marina

Marina
Tue Dec 09 10:25:08 CST 2003

Don't use the XP Firewall.

I'm talking about the ISA Firewall client. You can find it on
\\servername\mspclnt or something similar. Run the setup, make sure the
autodiscovery is turned off and that it is pointing to the servername
or -IP.

Marina

<anonymous@discussions.microsoft.com> schreef in bericht
news:116701c3be6d$a76f0750$a301280a@phx.gbl...
> Are you talking about the XP firewall client?
>
> If not and there is an ISA firewall client that needs to
> be installed upon the workstations. Where do I find the
> client to install it on the workstations.
>
> With thanks.
>
> >-----Original Message-----
> >Got the Firewall Client installed on the workstations?
> >
> >You don't want the FTP-inbound ports opened on your SBS.
> >
> >Marina
> >
> >"Calvin" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
> >> Hi
> >>
> >> Have an SBS server. With two ethernet connections one
> to
> >> the internet and one to the lan. Server is setup as
> >> standard as it can be. It is utilising the ISA
> firewall.
> >>
> >> The workstations are Windows XP profesional
> workstations.
> >>
> >> Problem is that users cannot FTP to internet sites from
> >> thier workstations as either themselves or
> administrator.
> >> But you can FTP to the sites directly from the server.
> >>
> >> I will openly admit my knowledge is very limited. I
> have
> >> checked on the ISA server and the ports 20 and 21 in and
> >> out custom filters are there and are allow mode.
> >>
> >> Does anyone have any ideas.
> >>
> >> With thanks
> >
> >
> >.
> >



Re: Users cannot FTP from workstations by Gary

Gary
Tue Dec 09 10:50:19 CST 2003

Hi Marina, sorry to butt in but I have a question regarding the blocking of
Port 21. Do we disable or delete the Backoffice FTP21 CustomFilter that is
already created, then allow access in by a custom filter from a certain IP
address if we want them to access via that port - (e.g. virus definition
updates). The same question for port 23 - if disabled does that mean that
it's effectively closed? Sorry to be a pain - I just need confirmation that
I'm doing it right.

TIA
"Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
news:EHmBb.50770$LC2.16095@typhoon.bart.nl...
> Don't use the XP Firewall.
>
> I'm talking about the ISA Firewall client. You can find it on
> \\servername\mspclnt or something similar. Run the setup, make sure the
> autodiscovery is turned off and that it is pointing to the servername
> or -IP.
>
> Marina
>
> <anonymous@discussions.microsoft.com> schreef in bericht
> news:116701c3be6d$a76f0750$a301280a@phx.gbl...
> > Are you talking about the XP firewall client?
> >
> > If not and there is an ISA firewall client that needs to
> > be installed upon the workstations. Where do I find the
> > client to install it on the workstations.
> >
> > With thanks.
> >
> > >-----Original Message-----
> > >Got the Firewall Client installed on the workstations?
> > >
> > >You don't want the FTP-inbound ports opened on your SBS.
> > >
> > >Marina
> > >
> > >"Calvin" <anonymous@discussions.microsoft.com> schreef in
> > bericht
> > >news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
> > >> Hi
> > >>
> > >> Have an SBS server. With two ethernet connections one
> > to
> > >> the internet and one to the lan. Server is setup as
> > >> standard as it can be. It is utilising the ISA
> > firewall.
> > >>
> > >> The workstations are Windows XP profesional
> > workstations.
> > >>
> > >> Problem is that users cannot FTP to internet sites from
> > >> thier workstations as either themselves or
> > administrator.
> > >> But you can FTP to the sites directly from the server.
> > >>
> > >> I will openly admit my knowledge is very limited. I
> > have
> > >> checked on the ISA server and the ports 20 and 21 in and
> > >> out custom filters are there and are allow mode.
> > >>
> > >> Does anyone have any ideas.
> > >>
> > >> With thanks
> > >
> > >
> > >.
> > >
>
>



Re: Users cannot FTP from workstations by Marina

Marina
Wed Dec 10 05:33:25 CST 2003

Hi Gary,

Rerun the ICW-wizard and make sure you uncheck the FTP in the
ISA-configuration during the configuration.
This will make sure that you're not allowing FTP into your server.
I think you will see that those customfilters are now disabled.
For workstations to be able to FTP you don't have to add rules or filters to
ISA, just make sure that the Firewall Client is installed on the clients
(not on the server).

Marina

"Gary" <nospam@hotmail.com> schreef in bericht
news:#bS7#PnvDHA.2220@TK2MSFTNGP09.phx.gbl...
> Hi Marina, sorry to butt in but I have a question regarding the blocking
of
> Port 21. Do we disable or delete the Backoffice FTP21 CustomFilter that is
> already created, then allow access in by a custom filter from a certain IP
> address if we want them to access via that port - (e.g. virus definition
> updates). The same question for port 23 - if disabled does that mean that
> it's effectively closed? Sorry to be a pain - I just need confirmation
that
> I'm doing it right.
>
> TIA
> "Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
> news:EHmBb.50770$LC2.16095@typhoon.bart.nl...
> > Don't use the XP Firewall.
> >
> > I'm talking about the ISA Firewall client. You can find it on
> > \\servername\mspclnt or something similar. Run the setup, make sure the
> > autodiscovery is turned off and that it is pointing to the servername
> > or -IP.
> >
> > Marina
> >
> > <anonymous@discussions.microsoft.com> schreef in bericht
> > news:116701c3be6d$a76f0750$a301280a@phx.gbl...
> > > Are you talking about the XP firewall client?
> > >
> > > If not and there is an ISA firewall client that needs to
> > > be installed upon the workstations. Where do I find the
> > > client to install it on the workstations.
> > >
> > > With thanks.
> > >
> > > >-----Original Message-----
> > > >Got the Firewall Client installed on the workstations?
> > > >
> > > >You don't want the FTP-inbound ports opened on your SBS.
> > > >
> > > >Marina
> > > >
> > > >"Calvin" <anonymous@discussions.microsoft.com> schreef in
> > > bericht
> > > >news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
> > > >> Hi
> > > >>
> > > >> Have an SBS server. With two ethernet connections one
> > > to
> > > >> the internet and one to the lan. Server is setup as
> > > >> standard as it can be. It is utilising the ISA
> > > firewall.
> > > >>
> > > >> The workstations are Windows XP profesional
> > > workstations.
> > > >>
> > > >> Problem is that users cannot FTP to internet sites from
> > > >> thier workstations as either themselves or
> > > administrator.
> > > >> But you can FTP to the sites directly from the server.
> > > >>
> > > >> I will openly admit my knowledge is very limited. I
> > > have
> > > >> checked on the ISA server and the ports 20 and 21 in and
> > > >> out custom filters are there and are allow mode.
> > > >>
> > > >> Does anyone have any ideas.
> > > >>
> > > >> With thanks
> > > >
> > > >
> > > >.
> > > >
> >
> >
>
>



Re: Users cannot FTP from workstations by Gary

Gary
Wed Dec 10 09:22:21 CST 2003

Thanks Marina - have now properly closed Ports 21 & 23 then set up a packet
filter for the Virus updates onto the Server.

Gary

"Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
news:9wDBb.51267$LC2.16659@typhoon.bart.nl...
> Hi Gary,
>
> Rerun the ICW-wizard and make sure you uncheck the FTP in the
> ISA-configuration during the configuration.
> This will make sure that you're not allowing FTP into your server.
> I think you will see that those customfilters are now disabled.
> For workstations to be able to FTP you don't have to add rules or filters
to
> ISA, just make sure that the Firewall Client is installed on the clients
> (not on the server).
>
> Marina
>
> "Gary" <nospam@hotmail.com> schreef in bericht
> news:#bS7#PnvDHA.2220@TK2MSFTNGP09.phx.gbl...
> > Hi Marina, sorry to butt in but I have a question regarding the blocking
> of
> > Port 21. Do we disable or delete the Backoffice FTP21 CustomFilter that
is
> > already created, then allow access in by a custom filter from a certain
IP
> > address if we want them to access via that port - (e.g. virus definition
> > updates). The same question for port 23 - if disabled does that mean
that
> > it's effectively closed? Sorry to be a pain - I just need confirmation
> that
> > I'm doing it right.
> >
> > TIA
> > "Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
> > news:EHmBb.50770$LC2.16095@typhoon.bart.nl...
> > > Don't use the XP Firewall.
> > >
> > > I'm talking about the ISA Firewall client. You can find it on
> > > \\servername\mspclnt or something similar. Run the setup, make sure
the
> > > autodiscovery is turned off and that it is pointing to the servername
> > > or -IP.
> > >
> > > Marina
> > >
> > > <anonymous@discussions.microsoft.com> schreef in bericht
> > > news:116701c3be6d$a76f0750$a301280a@phx.gbl...
> > > > Are you talking about the XP firewall client?
> > > >
> > > > If not and there is an ISA firewall client that needs to
> > > > be installed upon the workstations. Where do I find the
> > > > client to install it on the workstations.
> > > >
> > > > With thanks.
> > > >
> > > > >-----Original Message-----
> > > > >Got the Firewall Client installed on the workstations?
> > > > >
> > > > >You don't want the FTP-inbound ports opened on your SBS.
> > > > >
> > > > >Marina
> > > > >
> > > > >"Calvin" <anonymous@discussions.microsoft.com> schreef in
> > > > bericht
> > > > >news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
> > > > >> Hi
> > > > >>
> > > > >> Have an SBS server. With two ethernet connections one
> > > > to
> > > > >> the internet and one to the lan. Server is setup as
> > > > >> standard as it can be. It is utilising the ISA
> > > > firewall.
> > > > >>
> > > > >> The workstations are Windows XP profesional
> > > > workstations.
> > > > >>
> > > > >> Problem is that users cannot FTP to internet sites from
> > > > >> thier workstations as either themselves or
> > > > administrator.
> > > > >> But you can FTP to the sites directly from the server.
> > > > >>
> > > > >> I will openly admit my knowledge is very limited. I
> > > > have
> > > > >> checked on the ISA server and the ports 20 and 21 in and
> > > > >> out custom filters are there and are allow mode.
> > > > >>
> > > > >> Does anyone have any ideas.
> > > > >>
> > > > >> With thanks
> > > > >
> > > > >
> > > > >.
> > > > >
> > >
> > >
> >
> >
>
>



Re: Users cannot FTP from workstations by Marina

Marina
Wed Dec 10 19:54:48 CST 2003

You're welcome Gary, glad you've got it working.

Marina

"Gary" <nospam@hotmail.com> schreef in bericht
news:OlpRfDzvDHA.1512@TK2MSFTNGP10.phx.gbl...
> Thanks Marina - have now properly closed Ports 21 & 23 then set up a
packet
> filter for the Virus updates onto the Server.
>
> Gary
>
> "Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
> news:9wDBb.51267$LC2.16659@typhoon.bart.nl...
> > Hi Gary,
> >
> > Rerun the ICW-wizard and make sure you uncheck the FTP in the
> > ISA-configuration during the configuration.
> > This will make sure that you're not allowing FTP into your server.
> > I think you will see that those customfilters are now disabled.
> > For workstations to be able to FTP you don't have to add rules or
filters
> to
> > ISA, just make sure that the Firewall Client is installed on the clients
> > (not on the server).
> >
> > Marina
> >
> > "Gary" <nospam@hotmail.com> schreef in bericht
> > news:#bS7#PnvDHA.2220@TK2MSFTNGP09.phx.gbl...
> > > Hi Marina, sorry to butt in but I have a question regarding the
blocking
> > of
> > > Port 21. Do we disable or delete the Backoffice FTP21 CustomFilter
that
> is
> > > already created, then allow access in by a custom filter from a
certain
> IP
> > > address if we want them to access via that port - (e.g. virus
definition
> > > updates). The same question for port 23 - if disabled does that mean
> that
> > > it's effectively closed? Sorry to be a pain - I just need confirmation
> > that
> > > I'm doing it right.
> > >
> > > TIA
> > > "Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
> > > news:EHmBb.50770$LC2.16095@typhoon.bart.nl...
> > > > Don't use the XP Firewall.
> > > >
> > > > I'm talking about the ISA Firewall client. You can find it on
> > > > \\servername\mspclnt or something similar. Run the setup, make sure
> the
> > > > autodiscovery is turned off and that it is pointing to the
servername
> > > > or -IP.
> > > >
> > > > Marina
> > > >
> > > > <anonymous@discussions.microsoft.com> schreef in bericht
> > > > news:116701c3be6d$a76f0750$a301280a@phx.gbl...
> > > > > Are you talking about the XP firewall client?
> > > > >
> > > > > If not and there is an ISA firewall client that needs to
> > > > > be installed upon the workstations. Where do I find the
> > > > > client to install it on the workstations.
> > > > >
> > > > > With thanks.
> > > > >
> > > > > >-----Original Message-----
> > > > > >Got the Firewall Client installed on the workstations?
> > > > > >
> > > > > >You don't want the FTP-inbound ports opened on your SBS.
> > > > > >
> > > > > >Marina
> > > > > >
> > > > > >"Calvin" <anonymous@discussions.microsoft.com> schreef in
> > > > > bericht
> > > > > >news:0d9901c3be4d$33241db0$a301280a@phx.gbl...
> > > > > >> Hi
> > > > > >>
> > > > > >> Have an SBS server. With two ethernet connections one
> > > > > to
> > > > > >> the internet and one to the lan. Server is setup as
> > > > > >> standard as it can be. It is utilising the ISA
> > > > > firewall.
> > > > > >>
> > > > > >> The workstations are Windows XP profesional
> > > > > workstations.
> > > > > >>
> > > > > >> Problem is that users cannot FTP to internet sites from
> > > > > >> thier workstations as either themselves or
> > > > > administrator.
> > > > > >> But you can FTP to the sites directly from the server.
> > > > > >>
> > > > > >> I will openly admit my knowledge is very limited. I
> > > > > have
> > > > > >> checked on the ISA server and the ports 20 and 21 in and
> > > > > >> out custom filters are there and are allow mode.
> > > > > >>
> > > > > >> Does anyone have any ideas.
> > > > > >>
> > > > > >> With thanks
> > > > > >
> > > > > >
> > > > > >.
> > > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>