Mark,
That did it. Thanks a million.
Dat
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Mark E.
Smith
Sent: Monday, March 01, 2004 4:55 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] SecuRemote breaks FTP SSL
Dat,
Two things you can try:
Edit the $FWDIR/lib/base.def file on the management as follows:
change:
#define FTP_ENFORCE_NL
To:
//#define FTP_ENFORCE_NL
Push out the policy
-AND/OR-
On the SR side, edit userc.c and add:
:FTP_NL_enforce (0)
To the:
:options
Section. Restart SR/SC.
Mark
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:[EMAIL PROTECTED] On Behalf Of Dat
> Nguyen
> Sent: Friday, February 27, 2004 7:30 PM
> To: [EMAIL PROTECTED]
> Subject: [FW-1] SecuRemote breaks FTP SSL
>
> I have a WindowsXP machine with SecuRemote NG Build 53515 installed. I
> use SecuRemote to connect to one of our vendor. On the same machine, I
> would like to use FTP (Auth SSL) to connect to another vendor's FTP
> server. FTP (SSL) will only work if I uninstall SecuRemote. It seems
> to me that somehow SecuRemote acts as the third-man-in-the-middle that
> causes SSL to breaks.
>
> Here's the SSL error log:
>
> SSL_handshake:UNKWN before/connect initialization SSL_connect:UNKWN
> before/connect initialization SSL_connect:3WCH_A SSLv3 write client
> hello A SSL_connect:error in 3RSH_A SSLv3 read server hello A
> ftp: SSL/TLS connect COMMAND error:
> error:00000000:lib(0):func(0):reason(0)
> =>DONE SSL/TLS connect on COMMAND
>
> How do I make FTP(SSL) to work with SecuRemote installed?
>
> Thanks.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
