Re: [FW1] ftp server using random high ports

["Ivan Fox" <ifox100@FW1-NOSPAMhotmail.com>]

We have enabled PASV in the properties of FW-1.  The client is NcFTP.  The
number of files it downloads is inconsistent.  Sometime, it could download
100 files, then it is "disconnected" from the IIS 4.0's ftp server.
sometime, it could download 6,000.  It never downloaded 10,000 1K files in
the directory!

Any pointers are appreciated.

Regard,

----- Original Message -----
From: <misalert@capitalfactors.com>
To: <ifox100@hotmail.com>; <firewall-wizards@nfr.net>;
<fw1-wizards@phoneboy.com>; <fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Tuesday, December 19, 2000 10:01 PM
Subject: RE: [FW1] ftp server using random high ports


> Read up on PASV FTP and PORT FTP.  Enable those in your rulebase
properties
> and you shouldn't have that problem.  I usually only enable PORT.  Also
> check to see how your FTP client requests that information.  Usually you
> will see it say something like DATA TRANSFER [PORT OR PASV] when you ls or
> download a file.
>
> Cheers,
>
> Jamie
>
> -----Original Message-----
> From: Ivan Fox [mailto:ifox100@hotmail.com]
> Sent: Tuesday, December 19, 2000 9:07 PM
> To: fw-wiz; Fw1-Wizards (E-mail); fw-1-mailinglist (e-mail)
> Subject: [FW1] ftp server using random high ports
>
>
>
> some users need to access an external ftp server.  they can access to the
> server using regular port 20, 21.  However, when they try to "ls" or
"dir",
> nothing comes up.  Firewall-1 log shows that the ftp server coming back
> using random high ports!
>
> Is it typical/common for ftp's returning traffic using random high ports
> instead of port 21?
> Is there any implication to allow the ftp server coming back through
random
> high ports?
>
> Any comments/input are appreciated.
>
> Ivan
>
>
>
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
>
>
> The information transmitted by the following E-Mail is intended only for
the addressee and may contain confidential and/or privileged material. Any
interception, review, retransmission, dissemination, or other use, or taking
any action upon this information by persons or entities other than the
intended recipient is prohibited by law and may subject them to criminal or
civil liability. If you received this communication in error, please contact
us immediately atext. 3600 and delete the communication from
any computer or network system.
>
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================