[FW1] reason: tried to open tcp service port

[Brian Noecker <bnoecker@FW1-NOSPAMcorp.webb.net>]

Title: Rainwall

I'm getting some weird FTP issues that maybe someone can help with.  We've got an application that does an FTP upload to a remote server.  This process usually works fine with the current FW rules but we've been seeing the following lately on one application server in the log:

 

Reject    rule 0    ftp (destination port)     1344 (s_port)        Info: reason: tried to open tcp service port, port:lotus

 

I've seen this with the port:lotus, port: vosaic-ctrl, port: nfsd-tcp. 

 

I checked the network services lotus, which is listed as port 1352

 

Out of multiple FTP sessions, this only happens a few times, but we have been able to catch a connection closed, when doing a manual ftp, looking around, and then doing a ls or other random command. 

 

Ideas?

Thanks ahead of time.

 

Brian

 

 

-----Original Message-----
From: Michael Liberte [mailto:mliberte@netvision.net.il]
Sent: Friday, January 26, 2001 3:06 PM
To: 'Mark Squire'; 'fw-1-mailinglist-digest@lists.us.checkpoint.com'
Subject: RE: [FW1] Rainwall

Rainwall, even the latest version, isn't very good in load balancing VPNs.

It does load balancing for SR, however, it can do only load SHARING for site-to-site VPNs.

It works well on NT and Solaris, Linux support still needs some improvements.

Rainwall is OPSEC-compliant, it can send logs to ELA proxy, but has it's own management tools.

 

Cheers,

Michael.

-----Original Message-----
From: Mark Squire [mailto:MSquire@desonline.com]
Sent: Friday, January 26, 2001 10:51 PM
To: 'fw-1-mailinglist-digest@lists.us.checkpoint.com'
Subject: [FW1] Rainwall

Hi all,
So now I am curious.  Have any of you set up your firewalls redundantly using Rainwall?  Did you use VPN and SecuRemote?  If so I would like to ask you some questions (I sound like a Jenny Jones commercial about security).

1. If you have used this product, what do you think about how well it handles VPN load ballancing?
2. What about load ballancing of the rest of the traffic?
3. What platform do you use (ie NT, AIX)?
4. How well, and how does it work with Checkpoint?  Does it work through the policy editor some how?

I would be very interested in any experiences any of you can share about Rainwall.

C:\Mark