ClientAccess and Raptor Eagle 5

[Toto Zammataro <toto () intesis it>]

Has someone dealt with a filtering of ClientAccess/400
with a Raptor Eagle 5?
The traffic handshaking looks like this (TCP):

Client ---->449---->AS/400
Client ---->8470-8476--->AS/400
Client ---->Telnet ----->As/400

Now, sniffing the traffic with and without the FW I have
the same trace, but when I put the fw in the middle, with 
the right ports opened, I can see a final telnet session, but
the client doesn't receive any data (neither the usual mask)
and remain hooked for some minutes.
I think that the client or the server at this point understands
that it's speaking with a proxy, and not the real counterpart.

Am I missing something?

.toto
-- 
Toto Zammataro
Intesis SECURITY LAB            Phone: +39-2-671563.1
Via Settembrini, 35             Fax: +39-2-66981953
I-20124 Milano  ITALY           Email: toto () seclab com