Multiple IP assigned to one NIC problem

**thirdfey** · December 13th, 2001, 02:04 PM

Have a Win2k server setup with ISA Server acting as a firewall. Behind it I have 2 FTP sites running on 2 seperate machines with the external addresses on the firewall forwarding FTP requests to those sites. The problem is that when Someone makes a request for FTP site B the response from the server goes out with the IP of Site A so any firewall at the client side is blocking the responses since there are no clients trying to establish a connection with that IP address. Is there anyway of having it set to send back responses with the appropriate IP address on the data?

**iamtheman** · December 13th, 2001, 11:15 PM

Now THAT'S an interesting problem. If I find anything out I will let you know. Have you run that by Microsoft??

**DSTech** · December 14th, 2001, 02:10 AM

*Knows this is above his head but would be very interested in hearing what the pros say.*

-Danyll

**czone** · December 14th, 2001, 02:20 AM

this might be stupid question but..

Do you have both ftp servers on different ports and are you forwarding the correct ports to the correct machines (IP Addresses)?

James

**ShadowKing** · December 19th, 2001, 03:59 AM

I am working on it right now...

I have a friend who wrote the ISA book, and she is looking into it too...

I may need to set this up in my lab to figure it out, but it would be worth it, so hang tight...

**confus-ed** · December 19th, 2001, 07:10 AM

Shadowking

[quote] I may need to set this up in my lab to figure it out, but it would be worth it, so hang tight... <hr></blockquote>

Who the f are you? Batman????

**Raven** · December 19th, 2001, 07:43 AM

lol

**ShadowKing** · December 19th, 2001, 04:44 PM

[quote]Originally posted by confus-ed:
<strong>Shadowking,

Who the f are you? Batman????

</strong><hr></blockquote>

I am MUCH more diabolical than Batman.

Naw. I am a writer, but I have a lab that I control for a group of writers so that we can set up network scenarios and document them. Right now is a down time for that lab, so when I have some free time, I will see what I can do.

**ShadowKing** · December 19th, 2001, 08:26 PM

OK, been doing some thinking.

Try to unplug or disable that interface and see if you can connect at all.

It sounds like you cannot send packets from the second interface.

I will have to wait until next week to set this up, but I will take a look at it.

**confus-ed** · December 20th, 2001, 08:30 AM

bump.

I wanna see shadowkings answer in full, when he's finnished righting the worlds wrongs.....

**Nanna-nanna-nah Batman** · December 20th, 2001, 08:22 PM

Shadowking get out of my lab and tell them.

Wot? No Superhero...

**thirdfey** · December 21st, 2001, 07:56 AM

Sorry all,

Maybe I forgot to check the e-mail notification.

czone - Not a stupid question, I always try to start with the basics and it would be a question I would ask someone else. The FTP sites are both on port 21. I know I can do different ports but I think my problem will still continue of assigning the wrong IP on the rebound. I am using the server publishing rules to decide who goes where by the IP address they come in on.

iamtheman - Have not run this by Microsoft, doesn't that cost money?

DSTech - you just get to read about it, I had to figure it out

confus-ed - thanks for bumping it because I probably would of not seen my own topic even though I check this forum like a 100 times a day.

ShadowKing - which interface are you referring to. I have three NICs on the server. One for LAN, One hooked up to the cable modem with the 2 external IPs, and a third hooked to DSL that the ISA Server rolls over to as a backup if the cable modem should go down so the internal network can keep browsing the web. Are you speaking of Schinder?

Again, sorry I have been missing my own topic, thanks for al of the replies, I hope to keep tabs on this now. We have gone down to one FTP site but I would like to go back to the old way to seperate the sites. Plus, whats the point of paying for 5 IP's if your firewall can't use them correctly.

Tony

**ShadowKing** · January 2nd, 2002, 02:00 AM

OK, guys, sorry I have not gotten to this one...

Things have been busy this week when they were supposed to be dead...

I am aware and working on it. I wanna find this one out myself...

Sooooo... I really do have to do my work at work, but when that work is done, then I can do my fun stuff...