Login to smart dashboard Manage->Services Select ftp Choose edit Click advanced button on bottom right >From protocol type drop down box choose FTP_BASIC Install policy
>From CheckPoint's FW-1 Datasheet FTP_BASIC Protocol Type FTP_BASIC is a new protocol type. This protocol type enforces a reduced set of the FTP security checks done by the regular FTP protocol type. Using FTP_BASIC eliminates known connectivity problems with FTP implementations that are not fully RFC compliant. The following checks are NOT enforced by FTP_BASIC, and are enforced by the FTP protocol type: * That every packet is terminated with a newline character, so that the PORT command is not split across packets. This protects against the FTP Bounce attack. * Data connections to or from well-known ports are not allowed, to prevent the FTP data connection being used to access some other service. * Bidirectional traffic on the data connection is not allowed, as it can be used improperly Hope this helps. I had a client with the same scenario - R55 and this solved the issue JP -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Ray Sent: Wednesday, 10 November 2004 12:38 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] FTP Problems What versions are you running? I've read a lot of messages here about FTP problems but we have never had an issue under R55 and we have a lot of it going on. Ray >From: KEVIN LOVEGROVE <[EMAIL PROTECTED]> >Reply-To: Mailing list for discussion of Firewall-1 ><[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: [FW-1] FTP Problems >Date: Tue, 9 Nov 2004 13:09:29 +0300 > >I've always had problems using FTP from inside Checkpoint, and in the >past, if I had to upload something to an FTP site I just did it >directly from the Checkpoint machine itself. > >Now we are using Checkpoint on a Nokia, I can't do that. I have a rule >allowing all the flavours of FTP from my machine to the outside world, >and I can manually establish a connection to a remote server, and >respond to the userid/password prompts; and I can select the directory >I want, too. > >However, any time I try a PUT <filename> I get 'access denied'. I had >this problem with two different sites in the last two days, and both >clients assure me the access rights are fine. It also works fine when I >connect directly to the 'net via dialup. Unfortunately I have to shift >200Mb+ of data and I don't have an external broadband account. > >Does anyone have any advice? > >Cheers, >Kevin > >================================================= >To set vacation, Out-Of-Office, or away messages, send an email to >[EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your subscription options, >email [EMAIL PROTECTED] >================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
