Re: [FW1] slow initial connection

[Bill Husler <BHusler@FW1-NOSPAMPacBell.net>]

This sounds very similar to another discussion that has been going on here. If I
got it right, the problem is that these services attempt to do a reverse DNS lookup
during the initial connection and you are waiting for DNS to time out (probably
more like 90 seconds) before the login prompt appears. The solution is to ensure
that the name resolution will be successful. In our case, we have a split DNS
(separate independent internal and external DNS environments) and the solution will
be to direct the firewall to the internal DNS servers. I would guess that if you
disabled DNS entirely, the problem would go away as well, but I'm not a DNS expert.

Bill

DMatanic@newark.com wrote:

> Here's a problem that I've been wrestling with for the past three months.
> When making an outbound TELNET or FTP connection, the client connects
> immediately but doesn't receive a logon prompt till about 60 seconds
> afterwards.  At that point the users can login and everthing functions
> properly.
>
> Any ideas?
>
> Damir Matanic
> Chicago
> >
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================