Maybe try increase the TCP timeout value in the telnet servides "advanced" tab?
Rgds Michael Hofmeyr Information Security Architects Phone: +27 11 326-2242 Cell : +27 83 631 0736 Fax : +27 11 326-2285 152 Hendrik Verwoerd Drive Randburg, Gauteng, South Africa ********************************* -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Can2002 Sent: 18 February 2004 04:44 PM To: [EMAIL PROTECTED] Subject: [FW-1] Idle Telnet sessions being dropped by FW1 I'm having a problem where connections to a Telnet server on a DMZ port appear to be dropped by FW-1 after an idle time of 10 minutes. If I connect to the telnet server from a box on the same subnet, the telnet session remains open for greater than 10 minutes, but as soon as I connect from a subnet behind the firewall I see the 10 minute timeout. I happen to have a Packetshaper connected to the external interface of the firewall, so I tried connecting to it via telnet to see if it would drop after 10 idle minutes; it did! I logged onto the Nokia command line and tried telnetting to the Packetshaper, and the session remained after 10 idle minutes. For background, the FW is on NG_R55; however it was upgraded (using upgrade_export/import) from 4.1. Thanks in advance for any help! Chris ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
