By "pasv mode or not", do you mean you are changing
the option on the firewall, or in the client. I have
seen the same thing and tt is a client issue. Go into
your client setup and enable PASV mode. This should
fix it for you. Some clients have pasv enabled by
default (I think MS, and Solaris command line worked),
but WSFTP did not, just as you described. Enabling
pasv in the options fixed it.
Hal
Hal Dorsman
Data Network Engineer
Blackfoot Telephone Cooperative
Missoula, Montana, USA
[EMAIL PROTECTED]
(406) 541-5106
-----Original Message-----
From: Mike Hoffos [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 12, 2000 11:46 AM
To: [EMAIL PROTECTED]
Subject: [FW1] Bizarre ftp problems
I am having an urgent problem, and need any advice I can get.
The firewall is 4.1SP2 on Solaris 7.
Clients behind the firewall cannot successfully ftp out to anywhere,
pasv mode or not. All that is returned by any server I try is 421
Service not available (after they successfully login).
Even more strange (to me, but perhaps they are related) is that ftp's
into allowed servers behind the firewall give external clients the exact
behaviour. Machines in front of the firewall can successfully ftp out
(but not to NATd machines behind the firewall, then they get the 421
error as mentioned above).
As anyone seen this before? Is there a resolution?
Thanks,
Mike Hoffos
Technical Architect
Infocast Corporation
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
