[FW-1] CP NG ftp secure server, and address spoofing

[Ben Cuthbert <ben_cuthbert@FW1-NOSPAMYAHOO.CO.UK>]

HI all

I seem to have a problem with my FTP Secure Server.

My setup is as follows

ServerA= ftp secure proxy  on DMZ ( DMZ if off of
ServerB )
ServerB= Internet Firewall


When i connect from ServerA to the internet via FTP, i
can access any site without the firewall running, so
that means all connections are fine. When the Firewall
is started and i try and ftp to ServerA, and then do
the correct login user@firewall-username@remotesite
and so on.

I get a connection timed out... and in the logs i see
this error message.

ftp drop - message_info address spoofing, and this is
comming from the interface at ServerB, that makes up
the DMZ.

in the address spoofing for that interface, i have
the external public address of ServerA, and then
internal private address of ServerA. and that spoofing
is set to specific.

Any IDeas

__________________________________________________
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================