Hi,

I've got some strange problems with FTP transfair

--------FTP CLIENT-----FW----FTP SERVER----

Well, we have to establish a FTP Connection (Port 20:21) from a FTP Client to a FTP Server (WIN 2003 + Serv-U v5.0) behind the ASL Firewall (ASL 4.0.18).

Now i've got the Problem that my ftp Client (Unix Server)
want to send or to get files so files from the FTP Server behind the ASL and the ftp session freezes after around 20 Files. The Filesize is from 4 KB to max. 100 kb.

The Script from the FTP Client (Unix Maschine) looks every 5 minutes are they files on the FTP Server.

If there files on the FTP Server they get the files, but if there more den about 20 files on the server the transfairs to the 20th files and on the 21th files he hangs.

So want could that be ?
Detects ASL an intrusion an block the ip or somethink like that ?

If you need more Information please ask me.

Thanks for helping

Greetings Piet

Try reading through these two documents:
http://docs.astaro.org/older_version...NAT_Primer.pdf
http://docs.astaro.org/guidebooks/Gu...web-server.pdf

The second one helped me out a lot. This might not be the problem that you are having, but I have my Win XP Pro FTP server setup behind my firewall using the following:
Definitions -> Networks
Name IP address Subnet mask
Darwins_Server 192.168.1.254 255.255.255.255
Network -> Interfaces (for the second IP on the nic card, but I decided to use the primary IP for this one. For a second IP, just switch around the things so they are pointing to that interface instead of the main WAN_Interface__)
Network -> Nat/MASQ (two as follows):
Name Match parameters SRC translation DST translation
DNAT_Darwins_FTP Any -> WAN_Interface__ / FTP None Darwins_Server
DNAT_Darwins_FTP_Control Any -> WAN_Interface__ / FTP-CONTROL None Darwins_Server

Packet Filter -> Rules (2 entries as follows)
No. From (Client) Service To (Server) Action
1 Any FTP Darwins_Server Allow
2 Any FTP-CONTROL Darwins_Server Allow

Hope this helps.
Steve

Have a look into your Packetfilterlog. Do you find some portscan detections?
By downloading a lot of small files by using FTP in passive mode it looks like a portscan for ASL. This is related to FTP's structure.

Solution: Exclude your FTP-Server from Portscan Detection.

Cheers
Xeno

Hello,

I've disabelt the portscan detections now it works!

Thanks for Helping