I have the same problem as below but got around it by creating a second rule from dest to source (reverse from previous rule) on ports >1024... this is a static nat to one specific destination so it's not as insecure as it could be.
I assume this is a bug but other FTPs work fine so I can't explain why the data connection for this specific FTP fails... I am running NG FP3 HFA-308 on Solaris 8. Thanks DF -----Original Message----- From: Hasan, Irfan [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 9:45 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] FTP problem, can't get the list of files - I'm doing ftp from my DMZ which is holding public IP, so there is no NAT issue. - All the outgoing ports are open for this IP address. - When I see my logs, outgoing connection are successful to the ftp server. - But I can see the incoming drop connection from the FTP server to my client - The port number is keep changing every time, the port numbers are always 1000 plus. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
