[drhex2000]

Hi Danny,

thanks for looking into this.
I do not use an ressource object.
The rule is fairly trivial:
internal network|any|any traffic|ftp,ftp-bidir,ftp.pasv,ftp-port|accept|log
|*|any
Tracker shows the outgoing/incoming FTP traffic on a windows connection just fine:
Number: 279392
Date: 9Aug2007
Time: 14:19:48
Product: VPN-1 Power/UTM
Interface: eth1
Origin: optaukcp01
Type: Log
Action: Accept
Protocol: tcp
Service: ftp (21)
Source: LEONIS
Destination: ftp.mozilla.org
Rule: 8
Current Rule Number: 8-Standard
Rule Name: Outgoing ftp
Source Port: 57012
User: <no_auth>
NAT additional rule number: 0
NAT rule number: 49
Reason: Non-auth login: anonymous
Rule UID: {40BB2E76-131F-475C-AA16-39325614AB60}
SmartDefense Profile: Default_Protection
XlateSPort: 43614
XlateSrc: optauk_cpcluster01
Policy Info: Policy Name: Standard
Created at: Thu Aug 09 11:43:17 2007
Installed from: optats01

Failing Linux ones are neither accepted nor dropped, as they already fail on setup with the secure FTP server.

Thanks,

Florian