Firewall-1

Re: [FW-1] Please help :TCP packet out of state for FTP ACCESS

Subject: Re: [FW-1] Please help :TCP packet out of state for FTP ACCESS
From: Tom Louis <species3 AT YAHOO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 28 Dec 2005 10:28:51 -0800
Try using the ftp-pasv object

--- Mohit Kohli <mkohli AT MAHINDRABT DOT COM> wrote:

> Hi Guys
> 
> 
> 
> I am having problem while accessing the FTP site and
> getting the
> following error message.
> 
> 
> 
> Number:        81
> 
> Date:                     25Dec2005
> 
> Time:           11:23:42
> 
> Product:       VPN-1 & FireWall-1
> 
> Interface:     E10002
> 
> Origin:           FW-MEDDLIPUN (59.160.66.130)
> 
> Type:           Log
> 
> Action:         Drop
> 
> Service:       ftp (21)
> 
> Source:         192.168.180.10
> 
> Destination:   FTP1_ITEC (167.6.247.34)
> 
> Protocol:      tcp
> 
> Source Port:  3316
> 
> Information:       TCP packet out of state: First
> packet isn't SYN
> 
>                              tcp_flags: RST-ACK
> 
>  
> 
> I have unheck drop out of state tcp packet in
> statefull inspection under
> Global Properties.
> 
> Firewall is on windows 2003 and NG-AL (R55).WITH
> SERVICE PACK ON
> FIREWALL.
> 
> Do u have any idea.
> 
> Warm Regards,
> 
> Mohit Kohli
> 
> 
> 
> 
> 
>
*********************************************************
> Disclaimer:   
> The contents of this E-mail (including the contents
> of the enclosure(s) or attachment(s) if any) are
> privileged and confidential material of MBT and
> should not be disclosed to, used by or copied in any
> manner by anyone other than the intended
> addressee(s).   In case you are not the desired
> addressee, you should delete this message and/or
> re-direct it to the sender.  The views expressed in
> this E-mail message (including the enclosure(s) or
> attachment(s) if any) are those of the individual
> sender, except where the sender expressly, and with
> authority, states them to be the views of MBT.
> 
> This e-mail message including attachment/(s), if
> any, is believed to be free of any virus.  However,
> it is the responsibility of the recipient to ensure
> that it is virus free and MBT is not responsible for
> any loss or damage arising in any way from its use
>      
>
********************************************************
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
> 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>