Re: [FW1] ftp problems :ftp.compaq.com

[Greg Polanski <greg_polanski@FW1-NOSPAMadc.com>]

To gain access to ftp.compaq.com and ftp.oracle.com,
I had to apply BOTH newline patches to base.def in
FW v4.1, SP2.

The checkpoint support references are

10043.0.9
10043.0.4

nyland# diff -b /etc/fw/lib/base.def.orig /etc/fw/lib/base.def
560c560,563
< #define FTPPORT(match)        (call KFUNC_FTPPORT <0x1|(match)>)
---
> // 28aug2k, g.polanski, suppress mandatory newline based upon
> //    checkpoint FTP to some servers fails (10043.0.413)
> //
> // #define FTPPORT(match)     (call KFUNC_FTPPORT <0x1|(match)>)
565c568
< // #define FTPPORT(match)     (call KFUNC_FTPPORT <(match)>)
---
> #define FTPPORT(match)        (call KFUNC_FTPPORT <(match)>)
567c570,575
< #define FTP_ENFORCE_NL 
---
> // 28aug2k, g.polanski, eliminate definition of FTP_ENFORCE_NL
> // 29aug2k, g.polanski, not effective to ftp.compaq.com, so put back
> // 20sep2k, g.polanski, put comment in front of #define
> //    FTP to specific servers fails (10043.0.982)
> //
> // #define FTP_ENFORCE_NL 



McElroy Richard C wrote:
> 
> We ran into a similar problem trying to FTP through the firewall both
> ways. File size did not matter 110 kb or 50 mb. Our issue was an
> intermittent problem that was fairly hard to replicate. Sometimes it
> would not have a problem sometimes it would. Passive and active didn't
> matter nor did the TCP high ports fix that Checkpoint suggested. We did
> a TCP dump and it seems as if the Firewall as accepting a FIN ACK before
> all of the data was passed through. At first we thought it was a problem
> with the way the FTP servers TCP/IP stacks were configured but alas this
> was not the case the same issue arose when using a SUN server as an FTP
> box. Finally we looked into the inspect code that Checkpoint uses but
> could not track down the issue. I don't know if any of this helps but
> maybe some one actually figured out what was going on.
> 
> Rick
> 


_______________________________________________________________
Greg Polanski                    mailto:greg_polanski@adc.com
ADC Telecommunications, IncMSFAX
PO Box 1pager
Minneapolis, MN  55440-833@minncommpaging.com
_______________________________________________________________


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================