Opened 6 years ago

Closed 6 years ago

#8814 closed Feature request (wontfix)

Support for Microsoft Firewall "TMG" (was ISA Server before)

Reported by: Ben_random3232 Owned by:
Priority: normal Component: FileZilla Client
Keywords: Cc:
Component version: Operating system type: Windows
Operating system version: 6.1 (Win 7)

Description

Hi
It was impossible to use FileZilla Client behind a Microsoft Firewall (TMG, Threat Management Gateway, successor of ISA Firewall) with default FTP settings.

They allow only specific "Read" FTP commands and filter the others. So "MSLD" ("List Directory") produced "550 Access denied". A FTP session was not possible.

Interestingly "FtpExplorer" could list the directory but failed later by creating a directory on the remote server.

Here is a link to a MS blog describing exactly the problem I had and with a list of commands they block/allow.
http://blogs.technet.com/b/isablog/archive/2013/03/05/access-to-remote-ftp-server-through-tmg-2010-may-fail-with-error-550-access-denied.aspx

Would be very cool if FileZilla could use the "right" commands as client so it just works without the need to convince a paranoid admin to change the TMG settings "Hey, these settings are ok, they are from MS, you know! And what shi OpenSource you dare to use!!!". You perhaps know the tone...Well, perhaps the Microsoft settings are f*&% up. This may be the case.

Would be great if it is possible to change Filezilla commands.

At last: Thanks a lot for FileZilla.
best regards
Ben

Change History (1)

comment:1 Changed 6 years ago by Alexander Schuch

Resolution: wontfix
Status: newclosed

This is simply a bug in this FTP filter.

FileZilla asks the FTP server "Hey, what do you support?" and the FTP server nicely answers "Cool that you ask, I support MLSD". So FileZilla then issues MLSD.

You should file a bug report at this FTP filter, so either add MLSD to list of allowed commands or to remove MLSD from list of FEAT response (filter it there as well).

Note: See TracTickets for help on using tickets.