FWSM with Proxy FTP error, help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Unanswered Question
Apr 6th, 2009

I have 2 c6509 with one FWSM (3.2) in transparent mode on each chassis.Context1 for server1, and context2 for server 2 . A client in outside try to use proxy ftp, once issue 'proxy get texst.txt', the connection closed. Pls help

client> ftp


ftp> open server1


proxy open server2


proxy dir


proxy get test.txt


This scenario is ok when i tested withoug FWSM, or these two servers worked in one context

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
gfullage Tue, 04/07/2009 - 23:15

The FWSM (or the PIX/ASA) does NOT allow FTP proxy connections. These are seen as a security risk and therefore denied. If you look at the syslog messages, you'll see a message similar to:


*****%FWSM-4-406002: FTP port command different address: 1.1.1.1(172.25.8.81) to 172.30.201.24 on interface inside******


zhangjianping Wed, 04/08/2009 - 05:03

Thanks Sir.


Pls inform me how to resolve this issue.


The customer donot want to change the network structure, so is there any Command or ACL or other way to allow this application on FWSM?


You suggestion will be appreciated. thanks

Actions

This Discussion