A couple of things I would check,,,
 
1.) Has the customer changed his script. After he tells you no, ask again... :-)
 
2.) Can you run the same function from within the DMZ so that that firewall is not in the middle? If the same problems happen, then you know it is a script or FTP server problem vs a firewall. If it still happens, try using a ftp client instead of the script to continue to narrow down the problem. Eliminate the potential blocks one object at a time.
 
-----Original Message-----
From: Ivan Fox [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 25, 2000 7:54 PM
To: Firewall-1
Subject: [FW1] ftp dies in the middle of a session! Please help.

It's been working fine over the last 9 months.  *all of a sudden*, it does not work.  Talked to Check Point technical support, but to no avail.  (They suggested to stop the firewall service, applied FW- 1 Service Pack 6 or 7 for NT (We are currently using SP5 - build 4055, etc.)
 
A customer runs a script to *get* small files (about 1K) from our ftp servers (running on IIS 4.0 on NT with SP6a) in the DMZ.  The automated script is able to log on to the server and get some files, sometimes, 10, sometimes 100, sometimes 1000, but not all.  It always dies pre-maturely.
 
The firewall log does not show any drop or reject.  It always shows accept.  The ftp server log shows nothing/blank!  The log must show something If the ftp server drops or the client drops the session, the log shows that the session was dropped.
 
I have checked policy | properties and policy | properties | services together with the Check Point Technical Support.
 
Any pointers are appreciated.
 
Ivan
 

Reply via email to