Re: [FW1] ftp and internet browsers.

[James P. O'Shea III <jposhea3@panix.com>]

At 11:41 AM +0100 9/1/99, Nicholas Eustace wrote:
>
> >>>> Does anybody have an answer for this problem
>
> >>>>
> >>>> I am hosting a ftp site and currently users can connect to 
>this through the
> >>>> commandline and with any other proprietary ftp client 
>application if they are
> >>>> directly connected to the internet, but some people are going 
>through proxies
> >>>> and firewalls and are only allowed by their company to use 
>Netscape or internet
> >>>> explorer and it is with these people I am having problems. 
>Before I installed
> >>>> FW1 for NT they were able to connect using these browsers but 
>now these users
> >>>> cannot connect to the site. I have allowed in the  FW1 
>policies for(rule 1)
> >>>> anywhere to connect ftp server using the ftp service and (rule 
>2) from the ftp
> >>>> server to connect to anywhere using the ftp service  is this 
>correct or am I
> >>>> missing something very simple.
> >>>>


The browser is most likely using PASV (passive) mode FTP and the target
server doesn't support it.

Snoop the outside of the firewall and watch the target server not 
reply correctly
after the connection starts.
-james

James P. O'Shea III
jposhea3@panix.com



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================