Hello
We are running FW1 4.0 SP 6 on Solaris 2.6.
We are having ftp problems connecting to oracle-ftp.oracle.com. The
problem is related to the large welcome banner that the ftp site has.
The banner is split over several packets. Thus the first packet
containing the banner doesn't end with a newline/carriage control.
The enhancement that Checkpoint added to SP 6 to enforce NL checking
is causing the problem. Supposedly you can make a change to the
base.def file to correct this problem. But this would stop all NL
checking thus exposing us to the FTP vulnerability.
According to our maintenance provider FW1 4.0 SP 7 will correct this
problem. Is anyone aware of this and does SP 7 indeed correct the
problem? Or is the only solution to stop NL checking?
Thanks
Raymond
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
