.NET FTP client problem with NGX R61

[neily]

Hi there
I have a problem with a .NET FTP client accessing a Microsoft FTP server.
The error messages we get are: -

Without SSL enabled: (this tries to connect but the callback response from the endpoint is full of trash)



<add key="ssl" value="0"/> // no SSL

<add key="ftpServer" value="ftp://x.x.x.a/"/>

<add key="ftpun" value="username"/>

<add key="ftppw" value="password"/>

<add key="fileName" value="test.TXT"/>



The underlying connection was closed: The server committed a protocol violation.



at System.Net.FtpWebRequest.SyncRequestCallback(Objec t obj)

at System.Net.FtpWebRequest.RequestCallback(Object obj)

at System.Net.CommandStream.Abort(Exception e)

at System.Net.FtpWebRequest.FinishRequestStage(Reques tStage stage)

at System.Net.FtpWebRequest.GetRequestStream()









SSL enabled: (this seems to connect to the server – the callback response from the endpoint is well formed)



<add key="ssl" value="1"/> // SSL

<add key="ftpServer" value="ftp://x.x.x.a/"/>

<add key="ftpun" value="username"/>

<add key="ftppw" value="password"/>

<add key="fileName" value="test.TXT"/>





The remote server returned an error: (500) Syntax error, command unrecognized.

at System.Net.FtpWebRequest.SyncRequestCallback(Objec t obj)

at System.Net.FtpWebRequest.RequestCallback(Object obj)

at System.Net.CommandStream.Abort(Exception e)

at System.Net.FtpWebRequest.FinishRequestStage(Reques tStage stage)

at System.Net.FtpWebRequest.GetRequestStream()

The client source y.y.y.a connects to x.x.x.a and is natted on a router to destination x.x.x.b source stays as original.
This then hits our firewall "A" IP390 in a cluster running NGX R61 hotfix 01
The firewall NATes the source to y.y.y.b (this is the internal cluster IP for Firewall "A") with the destination as before x.x.x.b.The rule allows FTP and I have tried any any.

Next the process hits an internal firewall "B" where there is no NAT and the destination server sits behind this x.x.x.b. This firewall is running NG with AI

If the origianlclient ftp's using I.E there is no problem so you see the routing and NATTING is ok.

This previously worked when Firewal "A" was a Raptor.
If on the internal network you use the .NET FTP client to go to host x.x.x.b through Firewall "A" and not going through Firewall "B" there is no problem.



I have seen in the SmartDefence/FTP Security Server/Blocked FTP commands
that there are allowed FTP commands, Inotice there are no commands ftpServer, ftpun, ftppw, fileName. Is this the problem and how can these commands be added

Any ideas please.

Thanks Neil