Re: [FW1] FTP problems through 4.1 sp-2 looking for Ideas

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Thomas,
If the delay is on  the initial startup and then you are able to move fine, I would
look more into the dns/rev lookup from the server's perspective.  I recently
disabled S71rpc on my sun box and got excessive timeouts, similar to those long
delays associated with daemons attempting to do a reverse lookup of the incoming
client, and two the server sends out an ident to the client to attempt to learn the
system name.  You can try disabling dns on the server (for testing only, if you
really need it.  or 2, create a host entry for the hide address, or all addresses
from your automated clients, or 3, set a rule any any ident (maybe called auth)
reject.

HTH,
CryptoTech

Thomas Stala wrote:

> I have tried to do an ftp session through a dos prompt nt 2000. connection
> refused.
>
> if I try this outside of the firewall it works fine.
>
> I am able to get to other ftp sites fine.
>
> I created a rule to allow the server to do
>             ftp
>             ftp-pasv
>             ftp-port
>
> I never see anything being rejected in the logs.
>
> if I use my browser version 5.0 it takes about 5 minutes and then it gets to
> the site?
>
> any ideas
>
> Thomas Stala
> MCSE CCSE
> tstala@lucent.com
> pager> cell>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================