Had any one had the same problem with active Telnet and SSH
sessions from external SecuRemote or Site-to-Site IKE vpns ?

--
Antonio Costa
Analista de Redes e Seguranca
CCNA/CCSE/MCSE

Odebrecht Engenharia e Construcao
Sao Paulo / Brasil
Tel.: +55-11-3443-9813
Fax.: +55-11-3443-9861/9618

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] Behalf Of Robert
Rutherford
Sent: Wednesday, February 18, 2004 12:40 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] Idle Telnet sessions being dropped by FW1


I've seen this... what is the box you are trying to create a telnet
session to?

Robert Rutherford
+44 (0)1305 208232
+44 (0)7970 122362




Can2002 <[EMAIL PROTECTED]>
Sent by: Mailing list for discussion of Firewall-1
<[EMAIL PROTECTED]>
18/02/2004 14:44
Please respond to
Mailing list for discussion of Firewall-1
<[EMAIL PROTECTED]>


To
[EMAIL PROTECTED]
cc

Subject
[FW-1] Idle Telnet sessions being dropped by FW1






I'm having a problem where connections to a Telnet server on a DMZ port
appear to be dropped by FW-1 after an idle time of 10 minutes.

If I connect to the telnet server from a box on the same subnet, the
telnet session remains open for greater than 10 minutes, but as soon as I
connect from a subnet behind the firewall I see the 10 minute timeout.

I happen to have a Packetshaper connected to the external interface of
the firewall, so I tried connecting to it via telnet to see if it would
drop after 10 idle minutes; it did!  I logged onto the Nokia command line
and tried telnetting to the Packetshaper, and the session remained after
10 idle minutes.

For background, the FW is on NG_R55; however it was upgraded (using
upgrade_export/import) from 4.1.

Thanks in advance for any help!

Chris

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================



****************************************************************************
This E-mail and any files transmitted with it are in commercial confidence
and intended solely for the use of the individual or entity to whom they are
addressed. If you have received this E-mail in error please notify the
Administrator by E-mail. Any views or opinions expressed are solely those of
the author and do not necessarily represent those of DEK International or
its affiliates. [EMAIL PROTECTED]
****************************************************************************
This footnote also confirms that this message has been checked for the
presence of computer viruses.

http://www.dek.com
****************************************************************************


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to