View Single Post
  #9 (permalink)  
Old 2008-01-16
Reaper Reaper is offline
Member
 
Join Date: 2006-11-16
Location: Tallinn, Estonia
Posts: 82
Rep Power: 3
Reaper has an average reputation (10+)
Send a message via Skype™ to Reaper
Default Re: Firewall changes FTP filename?

Quote:
Originally Posted by Weaver View Post
Guess this answer is a little to late, anyhow, this behaviour is caused by SmartDefense. Also for example an "mkdir test227" will result in a new dir "test22_".

Smartdefense changest the string and reports a possible "FTP Bounce attack". I'm not sure but I think it doesn't look _where_ the 227 appears, but it interprets it as the 227 code for entering passive mode. Not very smart imho.

The only way I found to fix it is to make a new service, tcp port 21 with no application defined, which implies that also no other ftp checks will work. Does anyone have a better workaround?
Ok, thank you, now I at least know what's the causing that problem. Unfortunately I cannot create blank FTP service, firewall configuration is too complicated and that would surely break something else in FTP transfers.

I found another forum where the same problem was described:
IT Resource Center forums - strange FTP behaviour through firewall

Replacing 227 with 22_ everywhere sounds more like DumbDefense.
__________________
CCNA certified
Reply With Quote