Steve,
I just went through this same thing recently with a new install. Got out sniffers, added every conceivable service even remotely related to FTP, read all kinds of docs, and then I realized that I forgot all about the implicit rules. Simple as a check box in the policy config menu (at least in v4.1). It's possible that if you show your implicit rules you will see something there that happens before it ever hits your regular policy. You would think that it would log that, but it sure doesn't seem to.
-Jon
-----Original Message-----
From: Steve Babb [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 06, 2000 2:45 PM
To: [EMAIL PROTECTED]
Subject: [FW1] FTP sites timing out..
Hello,
I am running fw1 4.1 and have a problem when connecting to some ftp sites. I
connect succesfully to the site in question and input my username followed
by my password. At this point when I press return the ftp server just hangs
until the connection eventually times out. If I connect to the same ftp site
from outside my firewall it works fine. At first I thought it was down to me
dropping ident packets. I changed this rule to reject rather than drop and
it fixed a number of sites but not this one. Does anyone have any ideas? I
have checked the logs and after I connect to the server, no request for
anything comes from the ftp server in question. (I got ident requests
dropped for the ones that I have now fixed)
Thanks
Steve
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
