I would suggest against doing that.  It allows any type of packet to
initiate a connection.  That is a bad thing.

-----Original Message-----
From: Previti, James [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 17, 2002 12:18 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] FTP control session timeout


What happens to the state table when you do this?

Jim Previti




        [EMAIL PROTECTED]
        05/17/2002 09:47 AM

                 To: [EMAIL PROTECTED]@FiservMail
                 cc: James J. Previti/Telecom/Philadelphia/Fiserv@Fiserv
                 Subject: Re: FTP control session timeout


>I haven't visited this list in a while so I apologize if this is old
>news. We have a problem with FTP control sessions timing out of the
>state table before the data session has ended.

In fwui_head.def, add/uncomment the line:

#define ALLOW_NON_SYN_RULEBASE_MATCH

That will allow sessions to stay open "indefinitely".

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to