Ivan,
Before you get started with this, our issue is still unsolved.
I'm told they will be testing a solution any day now....
Did you just upgrade your NT box by either patching NT
or more likely IIS?
We have an extranet partner who had been transferring
files for two months. Then they switched to a very large
co-location site in Virgina(Digix), transfers dropped to about
30% success rate.
They blamed us immediately. They claimed that our 'FTP'
server(which is a giant third party Perl proggy) was at fault.
I found that astounding, since we made zero changes to
our systems and they had moved from an in-house box they
managed to a co-location provider who does all the work.
They had a hard time with accepting and answering the
question, "What changed? "
What I found is that they(Digix) had built a new box _exactly_
like the one that was working. When I inquired as to how
exactly they did this, they were enlightened to find it was
way different(new patches, hot fixes and IIS patches, etc.)
We ran a series of traces(with their help) and found that
the old system(which still exists) works fine. The new clone,
will login, then when it tries to transfer a file, sends a FIN
packet just before the actual data. The data would arrive, but
had nowhere to go.
Last I heard, they were checking with MS, who was denying
that IIS could do that - even though we had traces showing it.
If I come up with anything else, I send it along.
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> "Ivan Fox" <[EMAIL PROTECTED]> 7/25/00 8:54:19 PM >>>
>It's been working fine over the last 9 months. *all of a sudden*, it does not work.
>Talked to Check Point
>technical support, but to no avail. (They suggested to stop the firewall service,
>applied FW- 1 Service
>Pack 6 or 7 for NT (We are currently using SP5 - build 4055, etc.)
>
>A customer runs a script to *get* small files (about 1K) from our ftp servers
>(running on IIS 4.0 on NT with
>SP6a) in the DMZ. The automated script is able to log on to the server and get some
>files, sometimes, 10,
>sometimes 100, sometimes 1000, but not all. It always dies pre-maturely.
>
>The firewall log does not show any drop or reject. It always shows accept. The ftp
>server log shows
>nothing/blank! The log must show something If the ftp server drops or the client
>drops the session, the log
>shows that the session was dropped.
>
>I have checked policy | properties and policy | properties | services together with
>the Check Point
>Technical Support.
>
>Any pointers are appreciated.
>
>Ivan
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
