| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Issues with FTP again "reason:tried to open a known se rvice port"
- To: [email protected]
- Subject: Re: [FW-1] Issues with FTP again "reason:tried to open a known se rvice port"
- From: "CAMUNAS,MARIO (HP-Spain,ex1)" <[email protected]>
- Date: Fri, 3 Jan 2003 09:10:34 +0100
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
-----Original Message-----
From: CAMUNAS,MARIO (HP-Spain,ex1) [mailto:[email protected]]
Sent: Thursday, November 21, 2002 12:57 AM
To: [email protected]
Subject: Re: [FW-1] Tried to open tcp service port: Reject
Hello:
You can try two different things:
1) Define the service as other instead as TCP, recompile the policy
ans install it. In this way checkpoint shouldn´t treat the connection as TCP
an you will be able to connect to the server.
2) Add this line in the file /etc/fw/lib/base.def
#define NO_SERVER_PORT_CHECK
before this line
#ifndef NO_SERVER_PORT_CHECK
(this is the syntax for NG FP2 I don´t know which is the exact
syntax for FP3,I suppose is the same)
recompile the policy, install it and try.
I hope this help.
Regards,
Mario.
-----Original Message-----
From: Robert Masse [mailto:[email protected]]
Sent: Friday, January 03, 2003 1:00 AM
To: [email protected]
Subject: [FW-1] Issues with FTP again "reason:tried to open a known
service port"
Hi
I posted this a month ago and was only able now to try one of the remedies
(to no avail).
The issue I have is my FTP transfer fails randomly with an error in the
firewall logs saying:
FTP REJECT "reason: tried to open a known service port"
I was suggested to:
A: Disable the FTP checking in SmartDefense
or
B: Modify some code in the base.def file
Both suggestions have not worked. Has anyone else seen this?
I am running on IP330s with NG FP3
Any help is greatly appreciated,
Thanks
Rob
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
