[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] problems with FTP under FP3
- To: [email protected]
- Subject: [FW-1] problems with FTP under FP3
- From: Roman Serbski <[email protected]>
- Date: Wed, 25 Dec 2002 11:59:10 +0500
- Reply-To: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20021210
Good day list,
I have problems with ftp connection to my FTP server from
internal NAT'ed LAN.
#uname -a
SunOS sunny 5.8 Generic_108528-16 sun4u sparc SUNW,Ultra-250
#fw ver
This is Check Point VPN-1(TM) & FireWall-1(R) NG Feature
Pack 3 Build 53225
FTP server sits in DMZ and has real IP address (powered by
FreeBSD 4.6-STABLE, proftpd-1.2.6).
Proftpd is configured with "UseReverseDNS off" and
"IdentLookups off" so I don't think it is DNS problem.
FW rule is:
any FTPSERVER ftp accept (I tried ftp-pasv, ftp and ftp-pasv
but with no luck)
Local LAN (100Mb/s) is statically NATed. FTP clients are FAR
manager, CuteFTP Pro.
Here is the problem:
Initial connection to FTP server from internal LAN is OK,
downloading (_only_ as an anonymous user) from FTP server is
also OK. But if I tried to _upload_ some file, or if I login
as a _user_ and try to download/upload data connection's
speed becomes very slow (sometimes zero). There is no
dropped connection in the logs, speed is just very slow.
I tried both ftp and ftp-pasv, tried to change FTP server -
same results. I've read in archives that for the FW-4.1
there was some global "FTP Passive Mode" parameter, but
couldn't find it in NG FP3...
Any hints would be greatly appreciated!
Looking forward to hear from you.
Regards,
Roman
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================