Dominik,
I'm not sure if I understand you correctly, but you want to log all ftp
transfers without users having to authenticate on the firewall? Yes, that's
possible. Just make an ftp resource and use it in your ftp rule (set logging
to long) and do not have any user objects in the source field and accept
instead of user auth. You will then get all ftp transfers logged in the info
field in your log.

Lars

-----Opprinnelig melding-----
Fra: Dominik Miklaszewski [mailto:[EMAIL PROTECTED]]
Sendt: 9. august 2000 17:31
Til: [EMAIL PROTECTED]
Emne: [FW1] getting unauthenticated FTP logged? 



Hi Firewallers,

Is there a way around to get unauthenticated FTP
transfers logged on FW-1 (4.0 SP7, Solaris) ?
If I push them through the Security Server
(FTP->FTPres) it forces all transactions to
authenticate. 

I know, the other way to do it is just a sniffer
running on the box (i.e. sniffit) with some extensive
filtering focused on FTP. However I'd like to be sure
that I didn't have much choice ;)

cheers,
Dominik 

=====
Your rifle is only a tool
it is a hard heart which kills..
             <full metal jacket>
--------------------------------
Dominik M. Miklaszewski
[EMAIL PROTECTED]

__________________________________________________
Do You Yahoo!?
Kick off your party with Yahoo! Invites.
http://invites.yahoo.com/


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to