Flash FXP doesn't work under MS ISA server

symblazesro · 01-29-2004, 07:13 AM

Hi I am ready to purchase few licences for our company but I have to have Flash FXP working on computers hidden under the Microsoft ISA server (proxy/firewall). I went through this group but did not find any solution or description how to adjust ISA server or Flash FXP tool. On computers connected directly (not hidden under ISA server) Flash FXP works fine.

My configuration - Firewall:
Microsoft Internet Security and Acceleration Server 2000
Windows 2000 server SP3

My client configuration:
Windows XP Professional SP1
Flash FXP 2.1. build 924 (unregistered), AUTH TSL

error message: Connection failed (Connection lost)

Any advice??? Any experience with ISA server? I need to resolve this or start looking for another solution. Thanks a lot for you help.

Linkster · 01-29-2004, 07:40 AM

a bug was found with using ssl/tls and proxies...this has been fixed in the latest beta release. since you are not a registered user, you may have to talk to bigstar about getting a version to test before you purchase. does the connection work through the isa server when you disable tls?

symblazesro · 01-29-2004, 08:03 AM

thanks for quick response. If I am not using SSL/TSL auth and no proxy than I can connect to any FTP site. Once I choose the proxy than I am getting problems even without ssl/tsl authentization.

Connecting to 81.95.98.27 via Proxy (ecpraha:21) #1
220 ecpraha Microsoft FTP Service (Version 5.0).
500 'CONNECT 81.95.98.27:21 HTTP/1.0': command not understood

The problems is probably on the ISA serever side but have no idea how to adjust it.

Linkster · 01-29-2004, 08:44 AM

ahh, flashfxp does not support "CONNECT" method. Have you tried using http proxy? that may work. I wish i could be of more help, but I don't have much experience with ISA server. might google around for a solution.

symblazesro · 01-29-2004, 08:54 AM

I just released that after changing Options/Preferences i have to shut down Flash FXP and start it again. So the result is that ftp connection thrugh proxy (ISA) is working... now I have to try to get beta as you mentioned in the first reply... hope that the TSL wsill work.

thanks - you put me to the right way

bigstar · 01-29-2004, 09:25 AM

Let me see if I can clear a couple of things up.

Linkster, FlashFXP does use the "CONNECT" method when connecting via a HTTP Proxy.

FlashFXP v2.1 has a bug that prevented SSL/TLS from working correctly with a HTTP Proxy. Other proxy types should be ok.

I don't know anything about ISA, what proxy types does it support?

You shouldn't have to restart FlashFXP for the proxy changes to take effect, you just need to reconnect to the site.

symblazesro · 01-29-2004, 11:25 AM

Hi guys, many thanks for your excellent support but it seams I am not able find the solution. Using the most current build 956 but still getting error - the message is:

R] Connecting to www.oskarinteractive.cz via Proxy -> IP=ecpraha PORT=21
[R] Connected to www.oskarinteractive.cz via Proxy
[R] 220 ecpraha Microsoft FTP Service (Version 5.0).
[R] 500 'CONNECT www.oskarinteractive.cz:21 HTTP/1.0': command not understood

I expect the problem is really somewhere on the the Microsoft (ISA server side). But I am not savvy enought in technology to be able to resolve this problem and try to search on Microsoft site for "TLS"...

bigstar · 01-29-2004, 11:45 AM

I think you're trying to connect to the ISA server on the wrong port. You need to check which port your ISA server is using for HTTP proxy.

symblazesro · 01-29-2004, 11:50 AM

when I put there the HTTP proxy port (8080) than I get this message :-))))

[R] Connecting to www.oskarinteractive.cz via Proxy -> IP=ecpraha PORT=8080 (attempt # 5)
[R] Connected to www.oskarinteractive.cz via Proxy
[R] <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
[R] <HTML dir=ltr><HEAD><TITLE>The page cannot be displayed</TITLE>
[R] <STYLE>A:link {
[R] FONT: 8pt/11pt verdana; COLOR: #ff0000
[R] }
[R] A:visited {
[R] FONT: 8pt/11pt verdana; COLOR: #4e4e4e
[R] }
[R] </STYLE>
[R] <META content=NOINDEX name=ROBOTS>
[R] <META http-equiv=Content-Type content="text-html; charset=Windows-1252">
[R] <META content="MSHTML 5.50.4522.1800" name=GENERATOR></HEAD>
[R] <BODY bgColor=#ffffff>
[R] <TABLE cellSpacing=5 cellPadding=3 width=410>
[R] <TBODY>
[R] <TR>
[R] <TD vAlign=center align=left width=360>
[R] <H1 style="FONT: 13pt/15pt verdana; COLOR: #000000">The page
[R] cannot be displayed</H1></TD></TR>
[R] <TR>
[R] <TD width=400 colSpan=2><FONT
[R] style="FONT: 8pt/11pt verdana; COLOR: #000000">There is a problem with the
[R] page you are trying to reach and it cannot be displayed.</FONT></TD></TR>
[R] <TR>
[R] <TD width=400 colSpan=2><FONT
[R] style="FONT: 8pt/11pt verdana; COLOR: #000000">
[R] <HR color=#c0c0c0 noShade>
[R] <P>Please try the following:</P>
[R] <UL>
[R] <LI>Click the Refresh button,
[R] or try again later.<BR>
[R] <LI>Open the Web site
[R] home page, and then look for links to the information you want.
[R] <LI>If you typed the page address in the Address bar, make sure that it
[R] is spelled correctly.<BR>
[R] <LI>Verify that the Internet access policy on your network allows you
[R] to view this this page.</LI>
[R] <LI>If you believe you should be able to view this directory or page,
[R] please contact the Web site administrator by using the e-mail address or
[R] phone number listed on the Web site
[R] home page. </LI></UL>
[R] <H2 style="FONT: 8pt/11pt verdana; COLOR: #000000">HTTP 502 Proxy Error - The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)<BR>Internet Security and Acceleration Server</H2>
[R] <HR color=#c0c0c0 noShade>
[R] <P>Technical Information (for support personnel)</P>
[R] <UL>
[R] <LI>Background:<BR>The gateway could not retrieve the requested page.<P></P></LI>
[R] <LI>ISA Server: ecpraha.SYMBLAZE<BR>
[R] Via: <BR><BR>Time: 1/29/2004 4:51:49 PM GMT
[R] </LI></UL></FONT></TD></TR></TBODY></TABLE></BODY></HTML>
[R] Connection failed (Connection lost)
[R] Delaying for 10 seconds before reconnect attempt #6

bigstar · 01-29-2004, 12:36 PM

I'm not familiar with ISA but you're going to need to re-configure ISA to allow CONNECT on port 21 and 1025-65535

Does ISA support SOCKS5? It might be easier to configure.

senjoy · 02-08-2004, 10:10 AM

Hi bigstar,

I found that the key problem of why FlashFXP did not work under an ISA server is that the ISA server did not support "CONNECT method" . And as u recommended, the ISA server need reconfigured to support CONNECT method - a method used in FlashFXP. But I dont know how to do so. Please help me!

Thank you in advance,

Del^ · 02-25-2004, 06:23 AM

I have the same problem at work too... although I dont have access to amend the server's configuration - is there a possible work around that can be done to get things to connect?

Thanks

Del

bigstar · 02-25-2004, 08:05 AM

nope i'm afraid not. You'll need to have your admin allow support for the connect method.

Del^ · 02-26-2004, 06:32 AM

oh... thats not good

Firstly please support FlashFXP as it is the best software of its kind.

At the risk of being flamed now....For this one off problem then.... does anyone know of any software that would solve this problem for me (ie. offer a different way of connecting to FTP's) than physically altering the server configurations?

Thanks

Del^

bigstar · 02-26-2004, 02:02 PM

you can use a web browser like Internet Explorer