From owner-freebsd-chat  Thu Nov  9 10:41:21 2000
Delivered-To: freebsd-chat@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id 6D57B37B479
	for <chat@freebsd.org>; Thu,  9 Nov 2000 10:41:19 -0800 (PST)
Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Thu, 9 Nov 2000 10:39:49 -0800
Received: (from cjc@localhost)
	by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id eA9IfBD91739;
	Thu, 9 Nov 2000 10:41:11 -0800 (PST)
	(envelope-from cjc)
Date: Thu, 9 Nov 2000 10:41:10 -0800
From: "Crist J . Clark" <cjclark@reflexnet.net>
To: Dag-Erling Smorgrav <des@ofug.org>
Cc: Terry Lambert <tlambert@primenet.com>, dg@root.com,
	chat@FreeBSD.ORG
Subject: Re: ftp.freebsd.org b0rked?
Message-ID: <20001109104110.A91691@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <200010310720.AAA26392@usr02.primenet.com> <xzpitq9v0hh.fsf@flood.ping.uio.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <xzpitq9v0hh.fsf@flood.ping.uio.no>; from des@ofug.org on Tue, Oct 31, 2000 at 10:11:38AM +0100
Sender: owner-freebsd-chat@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Tue, Oct 31, 2000 at 10:11:38AM +0100, Dag-Erling Smorgrav wrote:
> Terry Lambert <tlambert@primenet.com> writes:
> > I have seen this with particular firewalls (I think CheckPoint
> > was one), where they attempt to do state tracking on FTP, and
> > fail to be able to do that and do address rewriting at the same
> > time.
> 
> Not relevant. I'm using real IP addresses and the connection is
> dropped immediately after the PASS command, no matter what password I
> actually send. There is a FW1 upstream, but it's supposed to let all
> traffic to and from my subnet through untouched.
> 
> David - is there any way we can try to debug this? I guess the first
> thing to try is if it's specific to dgftpd - do you have another site
> that runs dgftpd I can test against?

Better late than never? We had a problem with our FW-1 after an
"upgrade." Here is a source that sums up the different approaches to
the issue,

  http://www.securityportal.com/topnews/weekly/checkpoint20000918.html

Scroll down to the "Multiple Problems with FTP After Upgrading"
section. HTH.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message