>>> On 8/17/2009 at 11:05 AM, "M. N." <[email protected]> wrote: > Hi, > I'm having a weird issue with a R65 cluster (no HFA) where none of the two > firewalls is accepting SSH requests on its external interface. We tried the > VIP, member A & member B with no luck. > > Server is just closing the connection > > -Tracker shows traffic accepted > -TCPdump shows incoming packets and returning > > -"fw ctl zdebug drop" command shows no related drops > -Netstat command shows it IS listening on TCP22 > -No special static routes that would cause differing routing > -"service sshd restart" didn't help > > Weird thing is this only affects the external interface. I can SSH to the > SCS and then to the firewall fine.
You said a tcpdump on the external interface shows traffic going out of the firewall? It sounds like something else between the SSH client and firewall might be blocking the return traffic? All of this assumes that we are talking about problems establishing the TCP. If the TCP is establishing, then it could be something at the application layer. If you run the client, $ ssh -v -v -v <externalIP1> What do you see? Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
