Hi!
I have a problem with connection to one external FTP
server. FW-1 rejects connection
to only this server, while connections to others
servers is OK.
Log Viewer shows, that connection is accepted, but
tcpdump on external interface show that
FW sends RST to server after TCP connection is
established.
My working environment
FW-1 NG FP1 on Noika 740 cluster. IPSO 3.4.2
FW performs NAT
*********TRACE***********
FW Internal interface
tcpdump: listening on eth-s3p1c0
I A.B.C.D.2536 > E.F.G.H.21: S
3079734313:3079734313(0) win 16384 <mss
1460,nop,nop,sackOK> (DF)
O E.F.G.H.21 > A.B.C.D.2536: S
3432250312:3432250312(0) ack 3079734314 win 6144 <mss
1460> (DF)
I A.B.C.D.2536 > E.F.G.H.21: . ack 1 win 17520 (DF)
I A.B.C.D.2536 > E.F.G.H.21: R
3079734314:3079734314(0) win 0 (DF)
FW External interface
tcpdump: listening on eth1c0
O I.K.L.M.31052 > E.F.G.H.21: S
3131128799:3131128799(0) win 16384 <mss
1460,nop,nop,sackOK> (DF)
I E.F.G.H.21 > I.K.L.M.31052: S
3785581300:3785581300(0) ack 3131128800 win 6144 <mss
1460> (DF)
O I.K.L.M.31052 > E.F.G.H.21: . ack 1 win 17520 (DF)
I E.F.G.H.21 > I.K.L.M.31052: P 1:5(4) ack 1 win 6144
(DF) (FTP 220-)
O I.K.L.M.31052 > E.F.G.H.21: R
3131128800:3131128800(0) win 0 (DF)
O I.K.L.M.31052 > E.F.G.H.21: R
3131128800:3131128800(0) win 0 (DF)
***************************
Please any help or advice
Best regards
Alfreds
__________________________________________________
Do You Yahoo!?
Yahoo! Movies - coverage of the 74th Academy Awards�
http://movies.yahoo.com/
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
