Firewall-1

Re: [FW-1] Please help :TCP packet out of state for FTP ACCESS

Subject: Re: [FW-1] Please help :TCP packet out of state for FTP ACCESS
From: Gueorgui Gueorguiev <gueorgui.gueorguiev AT GLOBALTT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 28 Dec 2005 17:17:04 +0100
Hi,
We got this problem right after upgrading to SP1. Removing the SP1 helped to
re-establish the FTP traffic. All this with HFA-16.
Probably HFA-17 fixes this problem.

Regards,

Gueorgui


-----Message d'origine-----
De : Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]De la part de Mohit
Kohli
Envoye : mercredi 28 decembre 2005 16:04
A : FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Objet : [FW-1] Please help :TCP packet out of state for FTP ACCESS


Hi Guys





I am having problem while accessing the FTP site and getting the
following error message.




Number:        81

Date:                     25Dec2005

Time:           11:23:42

Product:       VPN-1 & FireWall-1

Interface:     E10002

Origin:           FW-MEDDLIPUN (59.160.66.130)

Type:           Log

Action:         Drop

Service:       ftp (21)

Source:         192.168.180.10

Destination:   FTP1_ITEC (167.6.247.34)

Protocol:      tcp

Source Port:  3316

Information:       TCP packet out of state: First packet isn't SYN

                             tcp_flags: RST-ACK




I have unheck drop out of state tcp packet in statefull inspection under
Global Properties.

Firewall is on windows 2003 and NG-AL (R55).WITH SERVICE PACK ON
FIREWALL.

Do u have any idea.

Warm Regards,

Mohit Kohli






*********************************************************
Disclaimer:

The contents of this E-mail (including the contents of the enclosure(s) or
attachment(s) if any) are privileged and confidential material of MBT and
should not be disclosed to, used by or copied in any manner by anyone other
than the intended addressee(s).   In case you are not the desired addressee,
you should delete this message and/or re-direct it to the sender.  The views
expressed in this E-mail message (including the enclosure(s) or
attachment(s) if any) are those of the individual sender, except where the
sender expressly, and with authority, states them to be the views of MBT.

This e-mail message including attachment/(s), if any, is believed to be free
of any virus.  However, it is the responsibility of the recipient to ensure
that it is virus free and MBT is not responsible for any loss or damage
arising in any way from its use


********************************************************

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>