[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] FTP control session timeout



I would suggest against doing that.  It allows any type of packet to
initiate a connection.  That is a bad thing.

-----Original Message-----
From: Previti, James [mailto:[email protected]]
Sent: Friday, May 17, 2002 12:18 PM
To: [email protected]
Subject: Re: [FW-1] FTP control session timeout


What happens to the state table when you do this?

Jim Previti




        [email protected]
        05/17/2002 09:47 AM

                 To: [email protected]@FiservMail
                 cc: James J. Previti/Telecom/Philadelphia/Fiserv@Fiserv
                 Subject: Re: FTP control session timeout


>I haven't visited this list in a while so I apologize if this is old
>news. We have a problem with FTP control sessions timing out of the
>state table before the data session has ended.

In fwui_head.def, add/uncomment the line:

#define ALLOW_NON_SYN_RULEBASE_MATCH

That will allow sessions to stay open "indefinitely".

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================