Windows Forum

Ask something
Discussion Locked

Publishing FTP site over ISA

0 helpful
14 replies

by lheisey

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Newly published FTP server which happens to be the same as my Terminal Server. Can access TSweb but no the FTP side of things. Getting this error. Any ideas please?

HTTP 502 Proxy Error - The ISA Server denies the specified
Uniform Resource Locator (URL). (12202)
Internet Security and Acceleration Server

14 replies

by cg it

ISA server is blocking traffic on ports 21/20. Can be due to no packet filter created to allow traffic, a rule that denies traffic, or your not a member of the group that is allowed access.

ISA server blocks all traffic unless specifically allowed by access policy site,content,rules,& filters.

by lheisey

I created an allow rule for an entirely different port. I allowed anonymous access.

by cg it

further since ISA server acts as the proxy, a port other than port 80 [because port 80 is used by IIS service] needs to be specified for inbound/outbound internet traffic. Your browser has to be configured to use the proxy server setting [you can do this by installing the ISA server firewall client programs]. Another potential reason is if your FTP server resides on a downstread server in your network. You'll have to configure ISA to foward FTP traffic to the specific downstread server.

by lheisey

I didn't follow your thread. I am talking about accessing the FTP site from outside the company. I did configure ISA to forward the FTP traffic to the downstream server.

by cg it

think about your comment. Created a allow rule for FTP on a different port than port 21. so what. URL FTP:// will come in on and go out of port 21/20 ISA server has to tell requesting parties, "oh by the way I'm not listening on port 21/20 for FTP traffic, I'm listening on port umpty ump". If you didn't do that, ISA server will deny traffic as it denies traffic on all ports unless specifically allowed.

by cg it

the other comment I have is rules are rules and govern who can do what,where,when,they are not packet filters which is how it will be done.

by lheisey

I appreciate you patience with me. I made a rule allowing access on port 42000. I created destinations directing to the proper internal server. I published the web and defined the port. What else are you saying that I may not be clearly understanding?

by cg it

what I'm saying that your not understanding is that you need to get a Microsoft Press ISA Server Training kit book for exam 70-227 {About $40.00 new {normally $60.00}, at Amazon.com. used about $28.00} and read how to setup,configure, manage & troubleshoot ISA Server 2000.

by lheisey

I have that book. I have ready, setup ISA published Mail, Web and terminal server. Those work fine and have been fine for 1 1/2 years. I do not see my answers in the book for the FTP site and wondered what I am not seeing. No need for you to respond further.

by cg it

Microsoft Internet Security and Acceleration Server 2000 Training exam 70-227, Chapter 6 page 239 Server Publishing Rules and IP Packet filters, then again Chapter 6 page 242 exercise 2 : verifying the FTP server connection. Lastly, the lesson summary about publishing a server on the perimeter or on the server that ISA server is on. Finally ensure the mapped protocol definition for the published server external interface is configured for the port ISA server will service. Default ports and protocols will always be used when you run the wizard.

by cg it

last final comment, your initial question was I'm getting this ISA Server error page when I try to connect to my FTP site, what could be wrong. After playing 20 questions & rejections, you finally provide detailed information on your setup which would have really helped in the beginning. I always felt Techrepublic was a forum for people who have a problem and tried basic troubleshooting techniques and come up empty handed. Then seek suggestions from other IT people. Not a forum for lets play jerk peoples chain for fun by playing 20 questions. Quess I was mistaken.

This discussion is closed to new replies.