Log in

View Full Version : Flash FXP doesn't work under MS ISA server


symblazesro
01-29-2004, 07:13 AM
Hi I am ready to purchase few licences for our company but I have to have Flash FXP working on computers hidden under the Microsoft ISA server (proxy/firewall). I went through this group but did not find any solution or description how to adjust ISA server or Flash FXP tool. On computers connected directly (not hidden under ISA server) Flash FXP works fine.

My configuration - Firewall:
Microsoft Internet Security and Acceleration Server 2000
Windows 2000 server SP3

My client configuration:
Windows XP Professional SP1
Flash FXP 2.1. build 924 (unregistered), AUTH TSL

error message: Connection failed (Connection lost)

Any advice??? Any experience with ISA server? I need to resolve this or start looking for another solution. Thanks a lot for you help.

Linkster
01-29-2004, 07:40 AM
a bug was found with using ssl/tls and proxies...this has been fixed in the latest beta release. since you are not a registered user, you may have to talk to bigstar about getting a version to test before you purchase. does the connection work through the isa server when you disable tls?

symblazesro
01-29-2004, 08:03 AM
thanks for quick response. If I am not using SSL/TSL auth and no proxy than I can connect to any FTP site. Once I choose the proxy than I am getting problems even without ssl/tsl authentization.

Connecting to 81.95.98.27 via Proxy (ecpraha:21) #1
220 ecpraha Microsoft FTP Service (Version 5.0).
500 'CONNECT 81.95.98.27:21 HTTP/1.0': command not understood

The problems is probably on the ISA serever side but have no idea how to adjust it.

Linkster
01-29-2004, 08:44 AM
ahh, flashfxp does not support "CONNECT" method. Have you tried using http proxy? that may work. I wish i could be of more help, but I don't have much experience with ISA server. might google around for a solution.

symblazesro
01-29-2004, 08:54 AM
I just released that after changing Options/Preferences i have to shut down Flash FXP and start it again. So the result is that ftp connection thrugh proxy (ISA) is working... now I have to try to get beta as you mentioned in the first reply... hope that the TSL wsill work.

thanks - you put me to the right way

bigstar
01-29-2004, 09:25 AM
Let me see if I can clear a couple of things up.

Linkster, FlashFXP does use the "CONNECT" method when connecting via a HTTP Proxy.

FlashFXP v2.1 has a bug that prevented SSL/TLS from working correctly with a HTTP Proxy. Other proxy types should be ok.

I don't know anything about ISA, what proxy types does it support?

You shouldn't have to restart FlashFXP for the proxy changes to take effect, you just need to reconnect to the site.

symblazesro
01-29-2004, 11:25 AM
Hi guys, many thanks for your excellent support but it seams I am not able find the solution. Using the most current build 956 but still getting error - the message is:

R] Connecting to www.oskarinteractive.cz via Proxy -> IP=ecpraha PORT=21
[R] Connected to www.oskarinteractive.cz via Proxy
[R] 220 ecpraha Microsoft FTP Service (Version 5.0).
[R] 500 'CONNECT www.oskarinteractive.cz:21 HTTP/1.0': command not understood

I expect the problem is really somewhere on the the Microsoft (ISA server side). But I am not savvy enought in technology to be able to resolve this problem and try to search on Microsoft site for "TLS"... :D

bigstar
01-29-2004, 11:45 AM
I think you're trying to connect to the ISA server on the wrong port. You need to check which port your ISA server is using for HTTP proxy.

symblazesro
01-29-2004, 11:50 AM
when I put there the HTTP proxy port (8080) than I get this message :-))))

[R] Connecting to www.oskarinteractive.cz via Proxy -> IP=ecpraha PORT=8080 (attempt # 5)
[R] Connected to www.oskarinteractive.cz via Proxy
[R] <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
[R] <HTML dir=ltr><HEAD><TITLE>The page cannot be displayed</TITLE>
[R] <STYLE>A:link {
[R] FONT: 8pt/11pt verdana; COLOR: #ff0000
[R] }
[R] A:visited {
[R] FONT: 8pt/11pt verdana; COLOR: #4e4e4e
[R] }
[R] </STYLE>
[R] <META content=NOINDEX name=ROBOTS>
[R] <META http-equiv=Content-Type content="text-html; charset=Windows-1252">
[R] <META content="MSHTML 5.50.4522.1800" name=GENERATOR></HEAD>
[R] <BODY bgColor=#ffffff>
[R] <TABLE cellSpacing=5 cellPadding=3 width=410>
[R] <TBODY>
[R] <TR>
[R] <TD vAlign=center align=left width=360>
[R] <H1 style="FONT: 13pt/15pt verdana; COLOR: #000000"><!--Problem-->The page
[R] cannot be displayed</H1></TD></TR>
[R] <TR>
[R] <TD width=400 colSpan=2><FONT
[R] style="FONT: 8pt/11pt verdana; COLOR: #000000">There is a problem with the
[R] page you are trying to reach and it cannot be displayed.</FONT></TD></TR>
[R] <TR>
[R] <TD width=400 colSpan=2><FONT
[R] style="FONT: 8pt/11pt verdana; COLOR: #000000">
[R] <HR color=#c0c0c0 noShade>
[R] <P>Please try the following:</P>
[R] <UL>
[R] <LI>Click the Refresh button,
[R] or try again later.<BR>
[R] <LI>Open the Web site
[R] home page, and then look for links to the information you want.
[R] <LI>If you typed the page address in the Address bar, make sure that it
[R] is spelled correctly.<BR>
[R] <LI>Verify that the Internet access policy on your network allows you
[R] to view this this page.</LI>
[R] <LI>If you believe you should be able to view this directory or page,
[R] please contact the Web site administrator by using the e-mail address or
[R] phone number listed on the Web site
[R] home page. </LI></UL>
[R] <H2 style="FONT: 8pt/11pt verdana; COLOR: #000000">HTTP 502 Proxy Error - The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)<BR>Internet Security and Acceleration Server</H2>
[R] <HR color=#c0c0c0 noShade>
[R] <P>Technical Information (for support personnel)</P>
[R] <UL>
[R] <LI>Background:<BR>The gateway could not retrieve the requested page.<P></P></LI>
[R] <LI>ISA Server: ecpraha.SYMBLAZE<BR>
[R] Via: <BR><BR>Time: 1/29/2004 4:51:49 PM GMT
[R] </LI></UL></FONT></TD></TR></TBODY></TABLE></BODY></HTML>
[R] Connection failed (Connection lost)
[R] Delaying for 10 seconds before reconnect attempt #6

bigstar
01-29-2004, 12:36 PM
I'm not familiar with ISA but you're going to need to re-configure ISA to allow CONNECT on port 21 and 1025-65535

Does ISA support SOCKS5? It might be easier to configure.

senjoy
02-08-2004, 10:10 AM
Hi bigstar,

I found that the key problem of why FlashFXP did not work under an ISA server is that the ISA server did not support "CONNECT method" . And as u recommended, the ISA server need reconfigured to support CONNECT method - a method used in FlashFXP. But I dont know how to do so. Please help me!

Thank you in advance,

Del^
02-25-2004, 06:23 AM
I have the same problem at work too... although I dont have access to amend the server's configuration - is there a possible work around that can be done to get things to connect?

Thanks

Del

bigstar
02-25-2004, 08:05 AM
nope i'm afraid not. You'll need to have your admin allow support for the connect method.

Del^
02-26-2004, 06:32 AM
oh... thats not good :(

Firstly please support FlashFXP as it is the best software of its kind.

At the risk of being flamed now....For this one off problem then.... does anyone know of any software that would solve this problem for me (ie. offer a different way of connecting to FTP's) than physically altering the server configurations?

Thanks

Del^

bigstar
02-26-2004, 02:02 PM
you can use a web browser like Internet Explorer

symblazesro
02-27-2004, 07:43 AM
not for TLS authentication

bigstar
02-27-2004, 07:59 AM
SSL/TLS wont work under these conditions, you need a direct connection and that's simply not possible unless the CONNECT method is allowed.

Carnivor
03-27-2004, 02:38 PM
My ISA is setup very similarly to your own,

Are your clients using the ISA firewall client ????

My clients use it and i have no problems using flashFXP on them

If you dont use it try it, you dont need to enter any details into any applications such as proxies etc, its as if the client is directly connected to the internet

Software is located at :

\\ISASERVER\mspclnt

its installed by default on the ISA server,

You can edit the firewall client details using the ISA MMC