We were running WS-FTP Pro server from IP
Switch with NAT. Clients that also used NAT could not connect. It is
in their documentation, something about SSL and FTP encrypting the address so
it can't find the return address to send data, if I remember
correctly. We switched to a Linux box using SSH and have had good
results. The down side is the FTP client has to support SSH. Most
of the newer ones do, so it's not a major problem.
-----Original Message-----
From: Bill
[mailto:[email protected]]
Sent: Thursday, February 27, 2003
2:16 PM
To:
[email protected]
Subject: Re: [FW-1] FW-1, NAT and
SSL
I do not see what the specific
problem is in the email, but if you are doing static nat (one-to-one), it
should not be a problem.
----- Original Message -----
Sent: Thursday,
February 27, 2003 10:06 AM
Subject: Re: [FW-1]
FW-1, NAT and SSL
The problem you run into is when the person connecting
to you is also using NAT. You may want to take a look at SSH.
-----Original Message-----
From: Torkel Mathisen [mailto:[email protected]]
Sent: Thursday, February 27, 2003
2:02 AM
To: [email protected]
Subject: Re: [FW-1] FW-1, NAT and
SSL
> Torkel Mathisen wrote:
> >
> > Is it possible get an SSL
connection through a FW-1 with NAT?
>
> Which direction? Is the server
behind NAT or the client? Setting up
> the encryption is not impacted
by NAT. Authentication can be impacted
> since the machines do not all
agree on what IP addresses are
> being used
> at the end-points.
What I want is to run an ftp-server with SSL behind
the FW-1. The server
needs to be NAT'ed in the FW and
communication will be both ways. Most
of the connections will be from
internet and to the server though.
Regards,
Torkel
=================================================
To set vacation, Out Of Office, or
away messages,
send an email to
[email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing
list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to
change your
subscription options, email
[email protected]
=================================================
