RE: Checkpoint issues with linux

["van Aswegen, Marinus (ZA - Johannesburg)" <mvanaswegen () deloitte co za>]

Hi Jason,

I suspect that it's a DNS issue. You might want to try using Netcat 
or another client where you can disable name resolution.

i.e. nc -n ip 7000

nc is available for both windows and unix, this should make things a 
little more consisted for you.

Kind Regards,

Marinus van Aswegen

Deloitte & Touche
Information Security Services

Phone: +27-(0)11-209-6324
Fax:     +27-(0)11-806-5202

PLEASE NOTE:  This e-mail message and its attachments is subject to the
disclaimers as published at: <http://www.deloitte.co.za/disc.htm#emaildisc>>


-----Original Message-----
From: Jason Lewis [mailto:jlewis () packetnexus com]
Sent: 19 October 2001 01:58
To: firewall-wizards () nfr com
Subject: [fw-wiz] Checkpoint issues with linux


Background.... I am putting linux servers at different locations across the
country.  The customer is required to open ports 7000-8000 inbound and
outbound for our proprietary client to communicate.  It is encrypted ftp
traffic.  The normal test procedure is to telnet from a windows laptop to
port 7000 at our noc.  This works fine with the windows box, but then fails
with the linux box.  Same IP used for both.

The issue was repeated at a second location using checkpoint fw.  I don't
use/own any checkpoints so getting support is difficult.

The problem seems related to linux and high ports (I am using 7000-8000)
with checkpoint FW, lower port ranges work fine.  I have been able to telnet
from our noc to the target with windows and solaris, but not linux.

Is there a something that is missing in the checkpoint config?  Is this a
known issue?

Jason Lewis
http://www.packetnexus.com
It's not secure "Because they told me it was secure".
The people at the other end of the link know less
about security than you do. And that's scary.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards