Alfred, It seems to me from the tcpdump output that the RST is being issued by the FTP *client* (timestamps would have been helpful!). Probably there's nothing wrong with the FW, considering that you see an accept log entry...
Any chance that you run some kind of detail logging on the client ? J. >From: Alfred Asars <[EMAIL PROTECTED]> >Reply-To: Mailing list for discussion of Firewall-1 ><[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: [FW-1] FW rejects FTP connection >Date: Thu, 21 Mar 2002 23:58:20 -0800 > >Hi! > >I have a problem with connection to one external FTP >server. FW-1 rejects connection >to only this server, while connections to others >servers is OK. > >Log Viewer shows, that connection is accepted, but >tcpdump on external interface show that >FW sends RST to server after TCP connection is >established. > >My working environment >FW-1 NG FP1 on Noika 740 cluster. IPSO 3.4.2 >FW performs NAT > >*********TRACE*********** > >FW Internal interface > >tcpdump: listening on eth-s3p1c0 >I A.B.C.D.2536 > E.F.G.H.21: S >3079734313:3079734313(0) win 16384 <mss >1460,nop,nop,sackOK> (DF) >O E.F.G.H.21 > A.B.C.D.2536: S >3432250312:3432250312(0) ack 3079734314 win 6144 <mss >1460> (DF) >I A.B.C.D.2536 > E.F.G.H.21: . ack 1 win 17520 (DF) >I A.B.C.D.2536 > E.F.G.H.21: R >3079734314:3079734314(0) win 0 (DF) > > >FW External interface > >tcpdump: listening on eth1c0 >O I.K.L.M.31052 > E.F.G.H.21: S >3131128799:3131128799(0) win 16384 <mss >1460,nop,nop,sackOK> (DF) >I E.F.G.H.21 > I.K.L.M.31052: S >3785581300:3785581300(0) ack 3131128800 win 6144 <mss >1460> (DF) >O I.K.L.M.31052 > E.F.G.H.21: . ack 1 win 17520 (DF) >I E.F.G.H.21 > I.K.L.M.31052: P 1:5(4) ack 1 win 6144 >(DF) (FTP 220-) >O I.K.L.M.31052 > E.F.G.H.21: R >3131128800:3131128800(0) win 0 (DF) >O I.K.L.M.31052 > E.F.G.H.21: R >3131128800:3131128800(0) win 0 (DF) > >*************************** > >Please any help or advice > >Best regards > > Alfreds > >__________________________________________________ >Do You Yahoo!? >Yahoo! Movies - coverage of the 74th Academy Awards� >http://movies.yahoo.com/ > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
