From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:24 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA01918 Tue, 3 Sep 2002 15:24:27 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18225; Tue, 3 Sep 2002 15:39:17 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018214; Tue, 3 Sep 02 19:38:28 GMT Message-ID: From: "Barreira, Fernando [IT]" To: "fwtk-users" Cc: fwtk-users Subject: [fwtk-users] RE: problem with STAT on ftp Date: Mon, 13 May 2002 15:07:16 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 4371 Status: RO i tried it against a UNIX ftp server and see the same problem. > ---------- > From: Ted Keller[SMTP:keller@bfg.com] > Sent: Monday, May 13, 2002 3:04 PM > To: Barreira, Fernando [IT] > Cc: fwtk-users > Subject: Re: [fwtk-users] problem with STAT on ftp > > Fernando, > > If you do this against a non-windows server - does it work? stat seems > to be supported through ftp-gw - at least to wu-ftpd daemons. > > ted keller > > > On Mon, 13 May 2002, Barreira, Fernando [IT] wrote: > > > i have a windows ftp program that is ued as follows.. > > > > It is a program called REALWATCH and is used to poll a server for > specific > > types of files and download them when they appear in the directory. > > > > It is a custom application by the company that provides the service and > > uses the library CSFTP32.OCX from Catalyst.com in their SocketTools > package. > > > > This library appears to want to do the STAT every time a file is > retrieved > > as a 'feature'. My guess is that they can then call a function like, > > 'filesize=get("server","filename");' in their code and know how large > the > > file is going to be so they can put up a percent complete message. > > > > This isn't a feature that it appears they can disable. They have > > rewritten the application a number of times to try to avoid it, but the > > underlying > > library won't remove the requirement for STAT. > > > > ========================here is the > problem=============================== > > > > Ok, here is the problem. Command line "get" works file > > FTP makes two connections to the proxy server. One over port 21, which > > is the control connection. And another (the data channel) that is > > negotiated depending on if it is passive or active mode. > > > > Over the control connection, commands get sent to tell the remote ftp > > server what it is you want to do. > > > > These are commands like: > > > > RETR > > LIST > > SYST > > PWD > > CWD > > PASV > > TYPE > > USER > > PASS > > DIR > > ...and the one that is killing us...STAT. > > > > You can NOT send these commands using an FTP client. They are lower > > level protocol commands. The only way to manually send them is with a > RAW > > (cooked) TCP connection to port 21 to manually manipulate the control > > channel. That is why I was using the telnet program to get more > > specific debug data. > > > > When you do a GET on a file using your FTP program, the ftp program > > translates this into a series of commands. In a simple FTP client, it > > may just send the RETR command to retrieve the file. In a more complex > FTP > > program, it may set the binary/ascii TYPE and STAT the file to find out > > how large it is so it can put up a progress meter, see the rights, etc. > > > > When you are doing your GET, you are doing just that - only sending a > > RETR command to get the file. You are absolutely right, this works just > > fine. > > > > HOWEVER, not all FTP clients do this. Some of them, and in this case > > some FTP processes embedded in proprietary applications that use FTP as > > their > > transport, send the additional commands, like STAT. > > > > What is happening is that when the client issues the STAT command, the > > proxy, or the downstream firewall, is killing the control channel. This > > should NOT happen. What should happen is either a message is sent back > > that says that the command is not supported, or the response should be > > returned to the user. > > > > This is what this incident is about - getting the proxy server to behave > > in the appropriate manner and either denying the STAT command or sending > > the response, but NOT destroying the control channel. The destruction > of > > the control channel breaks the whole FTP process and causes the program > to > > stop functioning. > > > > Everything that is being done in this transfer is fully RFC compliant > > for a FTP transfer. Nothing out of the ordinary is being done. The > issue > > is > > just that the STAT command destroys the connection. > > > > > > > > --- > > You are currently subscribed to fwtk-users as: keller@bfg.com > > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:26 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA01930 Tue, 3 Sep 2002 15:26:28 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18265; Tue, 3 Sep 2002 15:41:18 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018251; Tue, 3 Sep 02 19:41:01 GMT Date: Tue, 3 Sep 2002 12:42:19 +0400 From: Dmitry Miheev X-Mailer: The Bat! (v1.53d) X-Priority: 3 (Normal) Message-ID: To: "fwtk-users" Subject: [fwtk-users] fwtk, http-gw in transparent mode MIME-Version: 1.0 Content-Transfer-Encoding: 7bit List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 866 Status: RO Hello fwtk-users, Can starting fwtk(http-gw & ftp-gw) in transparent mode? FWTK 2.1 + transp.pch My config netperm-table ... http-gw: hosts * http-gw: permit-hosts unknown ... Starting http-gw -daemon 8180 transparent forwarding iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to localhost:8180 Go to http://www:80/ Log Aug 29 16:27:20 tester http-gw[3606]: 192.168.0.88 host address lookup failed Aug 29 16:27:20 tester http-gw[3606]: permit host=unknown/192.168.0.88 use of gateway (V2.1) Possible I need any option in command line or netperm-table??? -- Best regards, Dmitry Miheev mailto:caba@newmail.ru ICQ: 7316133 --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:28 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA01942 Tue, 3 Sep 2002 15:28:29 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18327; Tue, 3 Sep 2002 15:43:19 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018302; Tue, 3 Sep 02 19:43:06 GMT Message-ID: From: "Boggs, Scott" To: "fwtk-users" Subject: [fwtk-users] FTP/Web browser problems Date: Thu, 22 Aug 2002 09:33:28 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C249F9.A54879F0" Content-Length: 4617 Status: RO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C249F9.A54879F0 Content-Type: text/plain I have installed FWTK on a box running Solairs 8. I have been successful in getting the proxy to pass standard http traffic. However when I attempt to access a ftp site via the browser it does not connect. I have ensured that the proxy configuration for ftp on the browser is pointing the http proxy name and port. Any suggestions on this problem would be appreciated. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C249F9.A54879F0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable

I have installed FWTK on a box running Solairs 8.  I have been successful in = getting the proxy to pass standard http traffic.  = However when I attempt to access a ftp site via the = browser it does not connect.  I have = ensured that the proxy configuration for ftp on the browser is pointing the http = proxy name and port.  Any suggestions = on this problem would be appreciated.

 

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C249F9.A54879F0-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:30 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA01954 Tue, 3 Sep 2002 15:30:28 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18365; Tue, 3 Sep 2002 15:45:18 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018355; Tue, 3 Sep 02 19:44:40 GMT Message-ID: Date: Thu, 29 Aug 2002 10:08:57 +0100 From: Andrew Price Organization: Barclays Bank PLC X-Mailer: Mozilla 4.75 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] Use of firewall toolkit as your company's firewall Content-Transfer-Encoding: 7bit List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1885 Status: RO Apologies if you receive this more than once, I've had some trouble sending it. I've noticed a number of messages in the firewall toolkit list archives regarding use of the toolkit software as part of a company's firewall. By this I mean protecting yourself from third parties (and/or the Internet) by using the software. I do not mean use of it in any sense of making a product or distributing it with a product. The comments from the archives indicate that the toolkit licence allows you to do this, however we have been in discussion with Secure Computing (who bought Gauntlet this year) and they have stated that we need to purchase Gauntlet licences to cover our use of the toolkit. This will of course involve a considerable spend by us to do this. The comments in the archives seem to be from non TIS/Gauntlet/NAI personnel. My question to the mailinig list is therefore - does anybody have anything direct from TIS/Gauntlet/NAI confirming that use of the toolkit within a commercial organisation is within the scope of the licence, alternatively does anyone have anything they could share regarding having purchased any licences to cover their use of the toolkit Thanks Andrew Internet communications are not secure and therefore the Barclays Group does not accept legal responsibility for the contents of this message. Although the Barclays Group operates anti-virus programmes, it does not accept responsibility for any damage whatsoever that is caused by viruses being passed. Any views or opinions presented are solely those of the author and do not necessarily represent those of the Barclays Group. Replies to this email may be monitored by the Barclays Group for operational or business reasons. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:36 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA01976 Tue, 3 Sep 2002 15:36:30 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18495; Tue, 3 Sep 2002 15:51:20 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018478; Tue, 3 Sep 02 19:50:20 GMT From: "Takacs Istvan" To: "fwtk-users" Subject: [fwtk-users] How do I disable FTP access in http-gw? Date: Tue, 27 Aug 2002 14:41:04 +0200 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal X-Virus-Scanned: by AMaViS perl-11 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-2" Content-Length: 638 Status: RO Hi, There's a FAQ w. this title at this link; http://www.fwtk.org/fwtk/faq/faq.html#2.4.16 But I'm afraid I don't understand exactly how should I set this feature. So, I need to disable ftp:// access via web browsers. That's why I set a single line in our netperm-table as the documentation suggested; http-gw: ftp-proxy 127.0.0.1 but of course, it doesn't work. Could you help me please, what's wrong with my configuration? Thanks in advance! Regards; Istvan --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:40 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02012 Tue, 3 Sep 2002 15:40:32 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18632; Tue, 3 Sep 2002 15:55:23 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018597; Tue, 3 Sep 02 19:55:01 GMT Date: Tue, 20 Aug 2002 11:00:42 +0100 (BST) From: Andrew Price To: "fwtk-users" Subject: [fwtk-users] Use of firewall toolkit as your company's firewall Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1789 Status: RO I've noticed a number of messages in the firewall toolkit list archives regarding use of the toolkit software as part of a company's firewall. By this I mean protecting yourself from third parties (and/or the Internet) by using the software. I do not mean use of it in any sense of making a product or distributing it with a product. The comments from the archives indicate that the toolkit licence allows you to do this, however we have been in discussion with Secure Computing (who bought Gauntlet this year) and they have stated that we need to purchase Gauntlet licences to cover our use of the toolkit. This will of course involve a considerable spend by us to do this. The comments in the archives are all from non TIS/Gauntlet personnel. My question to the mailinig list is therefore - does anybody have anything direct from TIS/Gauntlet confirming that use of the toolkit within a commercial organisation is within the scope of the licence, alternatively does anyone have anything they could share regarding having purchased any licences to cover their use of the toolkit Thanks Andrew Internet communications are not secure and therefore the Barclays Group does not accept legal responsibility for the contents of this message. Although the Barclays Group operates anti-virus programmes, it does not accept responsibility for any damage whatsoever that is caused by viruses being passed. Any views or opinions presented are solely those of the author and do not necessarily represent those of the Barclays Group. Replies to this email may be monitored by the Barclays Group for operational or business reasons. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:44 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02016 Tue, 3 Sep 2002 15:44:31 -0400 (EDT) Received: by sentry.gw.tislabs.com; id PAA18716; Tue, 3 Sep 2002 15:59:21 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018708; Tue, 3 Sep 02 19:58:39 GMT From: "Scott E. Campbell" Organization: Greater Victoria Public Library To: "fwtk-users" Subject: [fwtk-users] Re: http-gw V 2.1 - page won't load Date: Wed, 31 Jul 2002 16:04:17 -0700 X-Mailer: KMail [version 1.4] In-Reply-To: MIME-Version: 1.0 Message-Id: List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id PAA02016 Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1633 Status: RO On July 31, 2002 12:36 pm, Atwood, Philip L. wrote: > I'm using http-gw V 2.1 on a Linux box and also on an older freebsd system. > Several months ago I had problems loading some pages a different web sites. > These problems were solved by applying Tony Gale's Jumbo patch > (trg-jumbo-20001114.diff). > > I have recently found a page ( www.fitchratings.com ) that still won't load > through either the Linux or the freebsd firewalls. I can load the page on a > browser connected outside our firewall, so I'm certain that the pages are > being dropped by http-gw. This web site is using cold fusion to generate a > lot of their web content. Can anyone confirm that they have a similar > problem with this site? Any thoughts on the cause or a solution? > I can tell you that it does NOT work for me either. I have V 2.1 with jumbo patch, gopu patch, and http-case patch installed. I would be interested if you found a solution to this - I'll look around on my system tomorrow and see what else I can find out. Scott > Thanks, > > ------------------- > Philip L. Atwood > Systems & Networking Manager > ALAS, Inc. > (312) 697-6985 > platwood@alas.com > > --- > You are currently subscribed to fwtk-users as: scampbel@gvpl.ca > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com -- Scott E. Campbell ------------------------- Systems Administrator - Computer Operations Greater Victoria Public Library Victoria, BC CANADA scampbel@gvpl.ca --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:47 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02029 Tue, 3 Sep 2002 15:47:32 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA18778; Tue, 3 Sep 2002 16:02:22 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018768; Tue, 3 Sep 02 20:01:49 GMT Message-ID: Date: Tue, 30 Jul 2002 13:34:35 -0700 (PDT) From: fernando barreira Subject: [fwtk-users] does fwtk UDP plugs To: "fwtk-users" MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 475 Status: RO in other words, if i am running voice over IP to the internet can i use fwtk to pass h323 traffic (TCP and UDP traffic)? also can one create plugs for UDP based applications? thanks. __________________________________________________ Do You Yahoo!? Yahoo! Health - Feel better, live better http://health.yahoo.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:51 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02036 Tue, 3 Sep 2002 15:51:34 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA18943; Tue, 3 Sep 2002 16:06:25 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018865; Tue, 3 Sep 02 20:05:23 GMT Message-ID: From: Jimmy Tam To: "fwtk-users" Subject: [fwtk-users] SA File Upload and FWTK problem Date: Fri, 21 Jun 2002 17:22:26 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C21982.E32C4F50" Content-Length: 5000 Status: RO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C21982.E32C4F50 Content-Type: text/plain -----Original Message----- From: Jimmy Tam Sent: Thursday, June 20, 2002 10:30 AM To: 'fwtk-users@listserv.nai.com' Subject: SA File Upload and FWTK problem We are trying to do large http file uploads using softartisans SA File Upload component behind a FWTK proxy. I am not sure if FWTK proxy has a limit on HTTP Posts or not. I have tried the demo file upload pages and they do not work either. Here is the link. http://demo.softartisans.com/demos/FileUpSamples/default.asp I get a http server error. Their tech support responded with the following: "This error can occur if you are using an older HTTP Proxy server. For example, Netscape Proxy Server V1.0 did not allow HTTP Post larger than 48 KB. Netscape Proxy Server V2.5 or later solves this problem entirely. Again, the browser would report a Network Error because it had more data to send in the HTTP TCP stream than was read by the receiver. I suggest checking the proxy settings and make sure they are appropriate for accepting large Posts." Is it browser related or a problem with FWTK? Any help would be appreciated. -Jimmy --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C21982.E32C4F50 Content-Type: text/html Message
 
-----Original Message-----
From: Jimmy Tam
Sent: Thursday, June 20, 2002 10:30 AM
To: 'fwtk-users@listserv.nai.com'
Subject: SA File Upload and FWTK problem

We are trying to do large http file uploads using softartisans SA File Upload component behind a FWTK proxy.
I am not sure if FWTK proxy has a limit on HTTP Posts or not. 
 
I have tried the demo file upload pages and they do not work either.  Here is the link.
 
I get a http server error.
 
Their tech support responded with the following:
 
"This error can occur if you are using an older HTTP Proxy server. For example, Netscape Proxy Server V1.0 did not allow HTTP Post larger than 48 KB. Netscape Proxy Server V2.5 or later solves this problem entirely. Again, the browser would report a Network Error because it had more data to send in the HTTP TCP stream than was read by the receiver.

I suggest checking the proxy settings and make sure they are appropriate for accepting large Posts."

 
Is it browser related or a problem with FWTK? 
 
Any help would be appreciated.
 
-Jimmy
 
 
 
 
---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C21982.E32C4F50-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:54 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02040 Tue, 3 Sep 2002 15:54:33 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19001; Tue, 3 Sep 2002 16:09:24 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma018987; Tue, 3 Sep 02 20:08:31 GMT Sender: ukr@tislabs.com Message-ID: Date: Tue, 25 Jun 2002 11:53:09 +0200 From: Uwe Krause X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.10 i586) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] compiling and patching problem List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/mixed; boundary="------------710B6619688CEC13B191F4D9" Content-Length: 2822 Status: RO This is a multi-part message in MIME format. --------------710B6619688CEC13B191F4D9 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable dear listmembers, I've got some Problems applying the sasl-ssl-nospam.patch. FWTK 2.1 is running on a SuSE 7.3 system with no patches applied. I untared fwtk-toolkit copied sasl-patch to /fwtk-dir/ and ran _patch < ./sasl+ssl+nospam.patch_ with getting the error message = Hunk #2 FAILED at 8 Hunk #7 succeeded at 272 with fuzz 1 Hunk #28 succeeded at 1569 (offset 9 lines) Hunk #29 FAILED at 1591 Hunk #30 succeeded at 1652 (offset 9 lines) 2 out of 30 hunks FAILED -- saving rejects to file smap.c.rej. Both yao-smap-patches patch fine :-)) Besides, I am trying to compile authsrv with md5 encryption for which srviio and cliio should be changed with their US counterpart, my question: Where to get those files?? Thanx in advance = Uwe Krause Am Hafen 28 25348 Gl=FCckstadt Germany --------------710B6619688CEC13B191F4D9 Content-Type: text/plain; charset=us-ascii; name="smap.c.rej" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="smap.c.rej" *************** *** 8,15 **** /* * Author: Marcus J. Ranum, Trusted Information Systems, Inc. */ - static char RcsId[] = "$Header: /usr/home/rick/fwtk2.0/fwtk/smap/RCS/smap.c,v 1.19 1997/01/18 20:40:53 rick Exp $"; #include --- 8,23 ---- /* * Author: Marcus J. Ranum, Trusted Information Systems, Inc. + * SSL Support by: Habeeb J. Dihu (MacGyver) + * SASL Support by: Habeeb J. Dihu (MacGyver) + * SASL and SSL patches are Copyright(C) 1997, 1998 + * Habeeb J. Dihu (MacGyver) , All Rights Reserved. + * + * The SSL and SASL patches are distributed under the Mozilla + * Public License, v1.0. Read the file LICENSE.MPL in the smap + * directory for details, or http://www.mozilla.org/MPL/. */ + static char RcsId[] = "$Header: /usr/home/rick/fwtk2.0/fwtk/smap/RCS/smap.c,v 1.20 1997/03/17 22:29:44 rick Exp $"; #include *************** *** 756,764 **** int cstat; #ifdef SYSV - while (wait3(&cstat, WNOHANG, (struct rusage *)0) > 0) - #else while (waitpid(-1, &cstat, WNOHANG) > 0) #endif ; } --- 1591,1599 ---- int cstat; #ifdef SYSV while (waitpid(-1, &cstat, WNOHANG) > 0) + #else + while (wait3(&cstat, WNOHANG, (struct rusage *)0) > 0) #endif ; } --------------710B6619688CEC13B191F4D9 Content-Type: text/plain; charset="us-ascii" Content-description: footer --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --------------710B6619688CEC13B191F4D9-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 15:57 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02048 Tue, 3 Sep 2002 15:57:34 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19062; Tue, 3 Sep 2002 16:12:25 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019055; Tue, 3 Sep 02 20:12:07 GMT Message-ID: Date: Fri, 05 Jul 2002 14:07:51 +0200 From: Richard van den Berg Organization: Trust Factory User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020610 Debian/1.0.0-1 MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] ftp-pasv patch/fix X-Enigmail-Version: 0.61.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/mixed; boundary="------------070701090205080107060405" Content-Length: 3314 Status: RO This is a multi-part message in MIME format. --------------070701090205080107060405 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Just in the odd change that anyone cares.. I just created a patch to the ftp-pasv.tgz set of patches. I modified the default behaviour of ftp-gw so that PORT and PASV commands of the client are sent in the same mode to the server. (A PASV command of the client will trigger a PASV to the server, while a PORT of the client triggers a PORT to the server.) This just seemed more transparant to me. The "pasv: true" statement in the config file still means "always send PASV to the server", and in addition "pasv: false" means "always send PORT to the server" (the behaviour of the unpatched ftp-gw). In addition, I fixed a small bug in connect_pasv() which made "pasv: true" unusable on my system. Enjoy, -- Richard van den Berg, CISSP Trust Factory B.V. | http://www.trust-factory.com/ Bazarstraat 44a | Phone: +31 70 3620684 NL-2518AK The Hague | Fax : +31 70 3603009 The Netherlands | --------------070701090205080107060405 Content-Type: text/plain; name="ftp_pasv_3.diff" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="ftp_pasv_3.diff" *** ./ftp-gw.c.org Fri Jul 5 11:22:26 2002 --- ./ftp-gw.c Fri Jul 5 13:22:24 2002 *************** *** 151,157 **** "response", OP_AOK, cmd_response, "resp", OP_AOK, cmd_response, "rein", OP_CONN, 0, ! "pasv", OP_CONN, cmd_pasv, "type", OP_CONN, 0, "stru", OP_CONN, 0, "mode", OP_CONN, 0, --- 151,157 ---- "response", OP_AOK, cmd_response, "resp", OP_AOK, cmd_response, "rein", OP_CONN, 0, ! "pasv", OP_CONN, cmd_pasv_pasv, "type", OP_CONN, 0, "stru", OP_CONN, 0, "mode", OP_CONN, 0, *************** *** 261,267 **** if((cf = cfg_get("pasv",confp)) != (Cfg *)0) { if (cf->argc < 1 || cf->argc > 2) { ! syslog(LLEV, "fwtkcfgerr: usage: pasv true [-portonly], line %d", cf->ln); exit(1); } if (strcasecmp(cf->argv[0], "true") == 0) { --- 261,267 ---- if((cf = cfg_get("pasv",confp)) != (Cfg *)0) { if (cf->argc < 1 || cf->argc > 2) { ! syslog(LLEV, "fwtkcfgerr: usage: pasv true|false [-portonly], line %d", cf->ln); exit(1); } if (strcasecmp(cf->argv[0], "true") == 0) { *************** *** 270,275 **** --- 270,281 ---- if(!strcasecmp("pasv",op->name)) op->op = cmd_pasv_pasv; } } + if (strcasecmp(cf->argv[0], "false") == 0) { + for(op = ops; op->name != (char *)0; op++) { + if(!strcasecmp("port",op->name)) op->op = cmd_port; + if(!strcasecmp("pasv",op->name)) op->op = cmd_pasv; + } + } if (cf->argc == 2 && strcasecmp(cf->argv[1], "-portonly") == 0) { port_only = 1; } *************** *** 2216,2219 **** --- 2222,2227 ---- if(connect(outgoing,(struct sockaddr *)&srvport,sizeof(srvport)) < 0) return(-1); + + return(0); } --------------070701090205080107060405 Content-Type: text/plain; charset="us-ascii" Content-description: footer --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --------------070701090205080107060405-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:01 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02054 Tue, 3 Sep 2002 16:01:37 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19159; Tue, 3 Sep 2002 16:16:28 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019151; Tue, 3 Sep 02 20:15:47 GMT Message-ID: From: Jimmy Tam To: "fwtk-users" Subject: [fwtk-users] SA FileUpload and FWTK problem Date: Mon, 24 Jun 2002 15:40:55 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C21BD0.33A64F40" Content-Length: 4399 Status: RO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C21BD0.33A64F40 Content-Type: text/plain We are trying to do large http file uploads using softartisans SA File Upload component behind a FWTK proxy. I am not sure if FWTK proxy has a limit on HTTP Posts or not. I have tried the demo file upload pages and they do not work either. Here is the link. http://demo.softartisans.com/demos/FileUpSamples/default.asp I get a http server error. Their tech support responded with the following: "This error can occur if you are using an older HTTP Proxy server. For example, Netscape Proxy Server V1.0 did not allow HTTP Post larger than 48 KB. Netscape Proxy Server V2.5 or later solves this problem entirely. Again, the browser would report a Network Error because it had more data to send in the HTTP TCP stream than was read by the receiver. I suggest checking the proxy settings and make sure they are appropriate for accepting large Posts." Is it browser related or a problem with FWTK? Any help would be appreciated. -Jimmy --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C21BD0.33A64F40 Content-Type: text/html Message
 
We are trying to do large http file uploads using softartisans SA File Upload component behind a FWTK proxy.
I am not sure if FWTK proxy has a limit on HTTP Posts or not. 
 
I have tried the demo file upload pages and they do not work either.  Here is the link.
 
I get a http server error.
 
Their tech support responded with the following:
 
"This error can occur if you are using an older HTTP Proxy server. For example, Netscape Proxy Server V1.0 did not allow HTTP Post larger than 48 KB. Netscape Proxy Server V2.5 or later solves this problem entirely. Again, the browser would report a Network Error because it had more data to send in the HTTP TCP stream than was read by the receiver.

I suggest checking the proxy settings and make sure they are appropriate for accepting large Posts."

 
Is it browser related or a problem with FWTK? 
 
Any help would be appreciated.
 
-Jimmy
 
 
---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C21BD0.33A64F40-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:03 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02058 Tue, 3 Sep 2002 16:03:36 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19173; Tue, 3 Sep 2002 16:18:27 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019169; Tue, 3 Sep 02 20:17:49 GMT X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Re: http-gw V 2.1 - page won't load Date: Tue, 3 Sep 2002 13:15:29 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 2305 Status: RO Well, _one_ of those patches listed on the page will fix the problem as I've applied just about all of them and the page loads OK for me. -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Scott E. Campbell [mailto:scampbel@gvpl.ca] > Sent: Wednesday, July 31, 2002 4:04 PM > To: fwtk-users > Subject: [fwtk-users] Re: http-gw V 2.1 - page won't load > > > On July 31, 2002 12:36 pm, Atwood, Philip L. wrote: > > I'm using http-gw V 2.1 on a Linux box and also on an older > freebsd system. > > Several months ago I had problems loading some pages a > different web sites. > > These problems were solved by applying Tony Gale's Jumbo patch > > (trg-jumbo-20001114.diff). > > > > I have recently found a page ( www.fitchratings.com ) that > still won't load > > through either the Linux or the freebsd firewalls. I can > load the page on a > > browser connected outside our firewall, so I'm certain that > the pages are > > being dropped by http-gw. This web site is using cold > fusion to generate a > > lot of their web content. Can anyone confirm that they have > a similar > > problem with this site? Any thoughts on the cause or a solution? > > > > I can tell you that it does NOT work for me either. I have V > 2.1 with jumbo > patch, gopu patch, and http-case patch installed. I would be > interested if > you found a solution to this - I'll look around on my system > tomorrow and see > what else I can find out. > > Scott > > > Thanks, > > > > ------------------- > > Philip L. Atwood > > Systems & Networking Manager > > ALAS, Inc. > > (312) 697-6985 > > platwood@alas.com > > > > --- > > You are currently subscribed to fwtk-users as: scampbel@gvpl.ca > > To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > -- > Scott E. Campbell > ------------------------- > Systems Administrator - Computer Operations > Greater Victoria Public Library > Victoria, BC CANADA > > scampbel@gvpl.ca > > --- > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:07 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02241 Tue, 3 Sep 2002 16:07:38 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19251; Tue, 3 Sep 2002 16:22:28 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019243; Tue, 3 Sep 02 20:22:00 GMT Message-ID: Date: Tue, 3 Sep 2002 16:18:10 -0400 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Use of firewall toolkit as your company's firewall Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from andrew.price@barclays.co.uk on Thu, Aug 29, 2002 at 10:08:57AM +0100 X-Virus-Scanned: at The OSIS Center by AMaViS-perl11-milter (http://amavis.org/) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1996 Status: RO On Thu, Aug 29, 2002 at 10:08:57AM +0100, Andrew Price wrote: > I've noticed a number of messages in the firewall toolkit list archives > regarding use of the toolkit software as part of a company's firewall. > By this I mean protecting yourself from third parties (and/or the > Internet) by using the software. I do not mean use of it in any sense of > making a product or distributing it with a product. > > The comments from the archives indicate that the toolkit licence allows > you to do this, however we have been in discussion with Secure Computing > (who bought Gauntlet this year) and they have stated that we need to > purchase Gauntlet licences to cover our use of the toolkit. This will of > course involve a considerable spend by us to do this. If this were true, this would be quite upsetting. However, I understand that SCC bought Gauntlet, but that TIS Labs is still part of NAI! And TIS Labs owns FWTK, ISTM. However, my beliefs are not definitive, much as I would prefer them to be. ;-> > The comments in the archives seem to be from non TIS/Gauntlet/NAI > personnel. My > question to the mailinig list is therefore - does anybody have anything > direct from TIS/Gauntlet/NAI confirming that use of the toolkit within a > commercial organisation is within the scope of the licence, Yes. And there should be several similar comments in the archive from people who were TIS employees at the time. > alternatively does anyone have anything they could share regarding > having purchased any licences to cover their use of the toolkit In the sense used above, I trust not!!! -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:10 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02245 Tue, 3 Sep 2002 16:10:37 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19288; Tue, 3 Sep 2002 16:25:28 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019282; Tue, 3 Sep 02 20:24:35 GMT Message-ID: Date: Tue, 3 Sep 2002 16:21:12 -0400 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: does fwtk UDP plugs Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from desonim@yahoo.com on Tue, Jul 30, 2002 at 01:34:35PM -0700 X-Virus-Scanned: at The OSIS Center by AMaViS-perl11-milter (http://amavis.org/) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 670 Status: RO On Tue, Jul 30, 2002 at 01:34:35PM -0700, fernando barreira wrote: > in other words, if i am running voice over IP to the > internet can i use fwtk to pass h323 traffic (TCP and > UDP traffic)? > > also can one create plugs for UDP based applications? > thanks. No and no. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:12 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02249 Tue, 3 Sep 2002 16:12:39 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19377; Tue, 3 Sep 2002 16:27:30 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019319; Tue, 3 Sep 02 20:27:10 GMT Message-ID: From: Jimmy Tam To: "fwtk-users" Subject: [fwtk-users] FWTK and SA File Upload Date: Thu, 20 Jun 2002 10:31:32 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C21880.51E2BE10" Content-Length: 3569 Status: RO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C21880.51E2BE10 Content-Type: text/plain We are trying to do large http file uploads using softartisans SA File Upload component behind a FWTK proxy. I am not sure if FWTK proxy has a limit on HTTP Posts or not. I have tried the demo file upload pages and they do not work either. Here is the link. < http://demo.softartisans.com/demos/FileUpSamples/default.asp> http://demo.softartisans.com/demos/FileUpSamples/default.asp I get a http server error. Their tech support responded with the following: "This error can occur if you are using an older HTTP Proxy server. For example, Netscape Proxy Server V1.0 did not allow HTTP Post larger than 48 KB. Netscape Proxy Server V2.5 or later solves this problem entirely. Again, the browser would report a Network Error because it had more data to send in the HTTP TCP stream than was read by the receiver. I suggest checking the proxy settings and make sure they are appropriate for accepting large Posts." Is it browser related or a problem with FWTK? Any help would be appreciated. -Jimmy --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C21880.51E2BE10 Content-Type: text/html Message

We are trying to do large http file uploads using softartisans SA File Upload component behind a FWTK proxy. I am not sure if FWTK proxy has a limit on HTTP Posts or not.

I have tried the demo file upload pages and they do not work either. Here is the link. <http://demo.softartisans.com/demos/FileUpSamples/default.asp>

http://demo.softartisans.com/demos/FileUpSamples/default.asp

I get a http server error.

Their tech support responded with the following:

"This error can occur if you are using an older HTTP Proxy server. For example, Netscape Proxy Server V1.0 did not allow HTTP Post larger than 48 KB. Netscape Proxy Server V2.5 or later solves this problem entirely. Again, the browser would report a Network Error because it had more data to send in the HTTP TCP stream than was read by the receiver.

I suggest checking the proxy settings and make sure they are appropriate for accepting large Posts."

Is it browser related or a problem with FWTK?

Any help would be appreciated.

-Jimmy

 
 
 
---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C21880.51E2BE10-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:16 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02254 Tue, 3 Sep 2002 16:16:39 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19489; Tue, 3 Sep 2002 16:31:30 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019482; Tue, 3 Sep 02 20:31:21 GMT Sender: ukr@tislabs.com Message-ID: Date: Fri, 21 Jun 2002 19:35:19 +0200 From: Uwe Krause X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.10 i586) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] compiling and patching problem List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/mixed; boundary="------------78199D8BA2A10F69638BA198" Content-Length: 2782 Status: RO This is a multi-part message in MIME format. --------------78199D8BA2A10F69638BA198 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable dear listmembers, I've got some Problems applying the sasl-ssl-nospam.patch. I've installed SuSE Linux 7.3, untared fwtk-toolkit copied sasl-patch to /fwtk-dir/ and ran _patch < ./sasl+ssl+nospam.patch_ with getting the error message = Hunk #2 FAILED at 8 Hunk #7 succeeded at 272 with fuzz 1 Hunk #28 succeeded at 1569 (offset 9 lines) Hunk #29 FAILED at 1591 Hunk #30 succeeded at 1652 (offset 9 lines) 2 out of 30 hunks FAILED -- saving rejects to file smap.c.rej. Both yao-smap-patches patch fine :-)) Besides, I am trying to compile authsrv with md5 encryption for which srviio and cliio should be changed with their US counterpart, my question: Where to get those files?? Thanx in advance = Uwe Krause Ah Hafen 28 25348 Gl=FCckstadt Germany --------------78199D8BA2A10F69638BA198 Content-Type: text/plain; charset=us-ascii; name="smap.c.rej" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="smap.c.rej" *************** *** 8,15 **** /* * Author: Marcus J. Ranum, Trusted Information Systems, Inc. */ - static char RcsId[] = "$Header: /usr/home/rick/fwtk2.0/fwtk/smap/RCS/smap.c,v 1.19 1997/01/18 20:40:53 rick Exp $"; #include --- 8,23 ---- /* * Author: Marcus J. Ranum, Trusted Information Systems, Inc. + * SSL Support by: Habeeb J. Dihu (MacGyver) + * SASL Support by: Habeeb J. Dihu (MacGyver) + * SASL and SSL patches are Copyright(C) 1997, 1998 + * Habeeb J. Dihu (MacGyver) , All Rights Reserved. + * + * The SSL and SASL patches are distributed under the Mozilla + * Public License, v1.0. Read the file LICENSE.MPL in the smap + * directory for details, or http://www.mozilla.org/MPL/. */ + static char RcsId[] = "$Header: /usr/home/rick/fwtk2.0/fwtk/smap/RCS/smap.c,v 1.20 1997/03/17 22:29:44 rick Exp $"; #include *************** *** 756,764 **** int cstat; #ifdef SYSV - while (wait3(&cstat, WNOHANG, (struct rusage *)0) > 0) - #else while (waitpid(-1, &cstat, WNOHANG) > 0) #endif ; } --- 1591,1599 ---- int cstat; #ifdef SYSV while (waitpid(-1, &cstat, WNOHANG) > 0) + #else + while (wait3(&cstat, WNOHANG, (struct rusage *)0) > 0) #endif ; } --------------78199D8BA2A10F69638BA198 Content-Type: text/plain; charset="us-ascii" Content-description: footer --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --------------78199D8BA2A10F69638BA198-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:20 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02266 Tue, 3 Sep 2002 16:20:38 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19600; Tue, 3 Sep 2002 16:35:29 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019592; Tue, 3 Sep 02 20:34:59 GMT X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Change in the List? Date: Tue, 3 Sep 2002 13:31:45 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 331 Status: RO Did something change in the list configuration? I've seen more traffic on it today than I've seen on it in many many months. -- Michael St. Laurent Hartwell Corporation --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:22 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02273 Tue, 3 Sep 2002 16:22:40 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19642; Tue, 3 Sep 2002 16:37:30 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019625; Tue, 3 Sep 02 20:36:31 GMT Message-Id: From: "Bautista, Ed" To: "fwtk-users" Subject: [fwtk-users] cookie problem on TIS firewall? Date: Mon, 17 Jun 2002 15:28:43 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 332 Status: RO Is there a known problem involving passing cookie from the proxy. If there is, is there a current patch I can download to resolve the problem? Thanks..................Ed. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:25 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02297 Tue, 3 Sep 2002 16:25:40 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19772; Tue, 3 Sep 2002 16:40:32 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019763; Tue, 3 Sep 02 20:40:08 GMT Message-ID: Date: Wed, 29 May 2002 07:59:58 -0400 From: "Michael C. Ibarra" To: "fwtk-users" Subject: [fwtk-users] ftp-gw problems behind a Nokia/FW-1-NG MIME-Version: 1.0 Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) 4.0-cvs X-WebMail-Company: Hawk Technologies, Inc. List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 1589 Status: RO Hello: I've recently migrated from using FW-1 on a Solaris server to a Nokia box running FW-1 version NG. Now, I am having some difficulty getting ftp-gw to work. I've searched the archives and all I have been able to find was a mention regarding data- port. I've since then applied the data-port patch and modified my netperm-table to include: ftp-gw: data-port 20 Unfortunately my results are still the same. Here is what my logs from my ftp server looks like: May 24 16:09:50 localhost ftpd[2713]: command: USER smith^M May 24 16:09:50 localhost ftpd[2713]: <--- 331 Password required for smith. May 24 16:09:50 localhost ftpd[2713]: <--- 221 You could at least say goodbye. May 24 16:09:50 localhost ftpd[2713]: FTP session closed As you can see, the session closes immediately after sending a request for the users password but the client never even sees a password prompt. Are there some other patches aside from the ones on fwtk.org for this problem? My set looks like the following: Client(ftp's to Proxy-srvr) --> Proxy-Server(ftp-gw) --> Ftp-Server Both connections on either side of the Proxy-Server(ftp-gw) pass through a Nokia box. My Proxy-Server, where fwtk lives, is running Solaris 2.8. Proxy-Server works fine passing through old FW-1 (version 4) Thanks in advance. -mike Michael C. Ibarra Hawk Technologies, Inc http://www.hawk.com 800.hawk.com -------------------------------------------------- --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:30 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02306 Tue, 3 Sep 2002 16:30:42 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19861; Tue, 3 Sep 2002 16:45:34 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019844; Tue, 3 Sep 02 20:45:21 GMT Message-ID: From: "Akong, Arnold (Exchange)" To: "fwtk-users" Subject: [fwtk-users] Can I run ftp-gw without installing FWTK Date: Wed, 19 Jun 2002 16:57:51 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/mixed; boundary="----=_NextPartTM-000-e5094b42-acb3-4acb-a482-e55e87079e7e" Content-Length: 3865 Status: RO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------=_NextPartTM-000-e5094b42-acb3-4acb-a482-e55e87079e7e Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C217D3.FA0539E0" ------_=_NextPart_001_01C217D3.FA0539E0 Content-Type: text/plain > -----Original Message----- > From: Akong, Arnold (Exchange) > Sent: Wednesday, June 19, 2002 3:14 PM > To: 'fwtk-users@listserv.nai.com' > Subject: Can I run ftp-gw without installing FWTK > > I need the ftp-gw 's functionality to support an internal mainframe > application to post (PUT) files out to specific sites on the Internet. I > have a separate firewall located on the outside of the proxy , so I do not > need the packet-filtering capability of the FWTK. > Question: > 1. Can I install ftp-gw without installing the full FWTK? > > 2. How do I do so? (compiler/ install scripts,...etc) > > 3. Are there any GOTYOUs I need to be aware? > > > Thanks.. ------_=_NextPart_001_01C217D3.FA0539E0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable Can I run ftp-gw without installing FWTK

     -----Original Message-----
    From:   Akong, Arnold (Exchange) 
    Sent:   = Wednesday, June 19, 2002 3:14 PM
    To:     'fwtk-users@listserv.nai.com'
    Subject:        Can I run ftp-gw without = installing FWTK

    I need the ftp-gw 's functionality to = support an internal  mainframe application to post (PUT) files out = to specific sites on the Internet. I have a separate firewall located = on the outside of the proxy , so I do not need the packet-filtering = capability of the FWTK. 

    Question:
    1. Can I install ftp-gw without = installing the full FWTK?

    2. How do I do so?  (compiler/ = install scripts,...etc)

    3.  Are there any GOTYOUs I need = to be aware?


    Thanks..

------_=_NextPart_001_01C217D3.FA0539E0-- ------=_NextPartTM-000-e5094b42-acb3-4acb-a482-e55e87079e7e Content-Type: text/plain; charset=us-ascii; name="Disclaimer" Content-Disposition: inline; filename="Disclaimer.txt" **************************************************************** Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *********************************************************************** ------=_NextPartTM-000-e5094b42-acb3-4acb-a482-e55e87079e7e Content-Type: text/plain; charset="us-ascii" Content-description: footer --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------=_NextPartTM-000-e5094b42-acb3-4acb-a482-e55e87079e7e-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:36 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02315 Tue, 3 Sep 2002 16:36:41 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA19993; Tue, 3 Sep 2002 16:51:32 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma019989; Tue, 3 Sep 02 20:51:30 GMT Message-ID: From: "DiGeronimo,Sergio" To: "fwtk-users" Subject: [fwtk-users] RE: Undefined Symbol - connection_ id Date: Thu, 16 May 2002 08:45:15 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1331 Status: RO The ftp-igw (and ftp-ogw) is in ../fwtk/ftp-gw2/ -----Original Message----- From: Rick Murphy [mailto:rmurphy@itm-inst.com] Sent: Wednesday, May 15, 2002 9:14 PM To: DiGeronimo,Sergio; fwtk-users Subject: Re: [fwtk-users] Undefined Symbol - connection_ id At 12:32 PM 5/15/02 -0400, DiGeronimo,Sergio wrote: >Hello, I would appreciate your help... >I am trying to install the ftp-proxy components of the FWTK version 2.1 on >Solaris 2.8 SPARC system > >I am encountering the following error when running 'make'; > >gcc -g -o ftp-igw ftp-igw.o ftp-misc.o bindport.o ../libfwall.a ../libauth.a >-lresolv -lsocket -lnsl >Undefined first referenced > symbol in file >connection_id ftp-igw.o >ld: fatal: Symbol referencing errors. No output written to ftp-igw >collect2: ld returned 1 exit status >*** Error code 1 >make: Fatal error: Command failed for target `ftp-igw' > >Appreciate your help - thanks in advance! I can't find anything in my FWTK 2.1 distribution matching ftp-igw.* or bindport.* What are you building? What directory off the fwtk distribution is this ftp-igw in? -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:40 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02333 Tue, 3 Sep 2002 16:40:51 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA20201; Tue, 3 Sep 2002 16:55:40 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma020129; Tue, 3 Sep 02 20:54:37 GMT Message-ID: From: "Rabinowitz, Ari (Exchange)" To: "fwtk-users" Subject: [fwtk-users] Has anyone written an LDAP authentication module? Date: Sun, 1 Sep 2002 11:00:06 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 807 Status: RO Hi, I've been looking in the archives, the contributed patches, and the FAQ, but I don't see any mention of an LDAP authentication module. Is no one using and LDAP directory server to keep the authentication information? Anyone have any suggestions, other than my writing it myself :-) Thanks, Ari **************************************************************** Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *********************************************************************** --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:43 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02345 Tue, 3 Sep 2002 16:43:51 -0400 (EDT) Received: by sentry.gw.tislabs.com; id QAA20267; Tue, 3 Sep 2002 16:58:40 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma020263; Tue, 3 Sep 02 20:58:13 GMT Message-ID: From: Magesh.Karunakaran@abnamro.com To: "fwtk-users" Subject: [fwtk-users] Re: http-gw - how many concurrent connections ca n it handled ??? Date: Fri, 2 Aug 2002 08:59:03 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C23A24.60E3A300" Content-Length: 2054 Status: RO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C23A24.60E3A300 Content-Type: text/plain Hi all, A quick question about http-gw. How much maximum users (concurrent users) can http-gw proxy can handle considering the hardware capacity is not an issue. Btw, we use sun E200R with 1 CPU 1 GB RAM. Kindly provide actual numbers from your experiences. Thanks all in advance Magesh -------------------------- Sent from my BlackBerry Wireless Handheld (www.BlackBerry.net) --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C23A24.60E3A300 Content-Type: text/html Content-Transfer-Encoding: quoted-printable Re: [fwtk-users] Re: http-gw - how many concurrent connections = can it handled ???

Hi all,
A quick question about http-gw.
How much maximum users (concurrent users) can = http-gw proxy can handle considering the hardware capacity is not an = issue.

Btw, we use sun E200R with 1 CPU 1 GB RAM.

Kindly provide actual numbers from your = experiences.

Thanks all in advance
Magesh
--------------------------
Sent from my BlackBerry Wireless Handheld = (www.BlackBerry.net)

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------_=_NextPart_001_01C23A24.60E3A300-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:46 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02358 Tue, 3 Sep 2002 16:46:52 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA20299; Tue, 3 Sep 2002 17:01:41 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma020291; Tue, 3 Sep 02 21:01:20 GMT Message-ID: From: "Don" To: "fwtk-users" Subject: [fwtk-users] Re: http-gw V 2.1 - page won't load Date: Wed, 31 Jul 2002 15:49:37 -0400 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----=_NextPart_000_013E_01C238A9.DFA8B800" Content-Length: 4589 Status: RO This is a multi-part message in MIME format. ------=_NextPart_000_013E_01C238A9.DFA8B800 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I'm runing the FWTK v 2.1 w/ all patches on RedHat Linux 6.2 The page loaded fine for me. ----- Original Message -----=20 From: Atwood, Philip L.=20 To: fwtk-users=20 Sent: Wednesday, July 31, 2002 3:36 PM Subject: [fwtk-users] http-gw V 2.1 - page won't load I'm using http-gw V 2.1 on a Linux box and also on an older freebsd = system. Several months ago I had problems loading some pages a different web sites. These problems were = solved by applying Tony Gale's Jumbo patch (trg-jumbo-20001114.diff). I have recently found a page ( www.fitchratings.com ) that still won't = load through either the Linux or the freebsd firewalls. I can load the page on a browser connected = outside our firewall, so I'm certain that the pages are being dropped by http-gw. This web site is = using cold fusion to generate a lot of their web content. Can anyone confirm that they have a = similar problem with this site? Any thoughts on the cause or a solution? Thanks, ------------------- Philip L. Atwood Systems & Networking Manager ALAS, Inc. (312) 697-6985 platwood@alas.com --- You are currently subscribed to fwtk-users as: doctor@lclcan.com To unsubscribe send a blank email to = leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------=_NextPart_000_013E_01C238A9.DFA8B800 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I'm runing the FWTK v 2.1 w/ all = patches on RedHat=20 Linux 6.2
 
The page loaded fine for = me.
----- Original Message -----
From:=20 Atwood, = Philip=20 L.
Sent: Wednesday, July 31, 2002 = 3:36=20 PM
Subject: [fwtk-users] http-gw V = 2.1 -=20 page won't load

I'm using http-gw V 2.1 on a Linux box and also on an = older=20 freebsd system. Several months ago I had
problems loading some = pages a=20 different web sites. These problems were solved by applying = Tony
Gale's=20 Jumbo patch (trg-jumbo-20001114.diff).

I have recently found a = page (=20 www.fitchratings.com ) = that still=20 won't load through either the Linux
or the freebsd firewalls. I can = load=20 the page on a browser connected outside our firewall, so = I'm
certain that=20 the pages are being dropped by http-gw. This web site is using cold = fusion to=20 generate
a lot of their web content. Can anyone confirm that they = have a=20 similar problem with this site? Any
thoughts on the cause or a=20 solution?

Thanks,

-------------------
Philip L.=20 Atwood
Systems & Networking Manager
ALAS, Inc.
(312)=20 697-6985
platwood@alas.com

---
You= are=20 currently subscribed to fwtk-users as: doctor@lclcan.com
To = unsubscribe send a=20 blank email to leave-fwtk-users= -15149U@listserv.nai.com ---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------=_NextPart_000_013E_01C238A9.DFA8B800-- From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:49 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02362 Tue, 3 Sep 2002 16:49:53 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA20355; Tue, 3 Sep 2002 17:04:43 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma020346; Tue, 3 Sep 02 21:04:26 GMT Date: Tue, 3 Sep 2002 17:01:01 -0400 From: Joseph S D Yao To: "fwtk-users" Cc: fwtk-users Subject: [fwtk-users] Re: Change in the List? Message-ID: Mail-Followup-To: "Michael St. Laurent" , fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from mikes@hartwellcorp.com on Tue, Sep 03, 2002 at 01:31:45PM -0700 X-Virus-Scanned: at The OSIS Center by AMaViS-perl11-milter (http://amavis.org/) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 878 Status: RO On Tue, Sep 03, 2002 at 01:31:45PM -0700, Michael St. Laurent wrote: > Did something change in the list configuration? I've seen more traffic on > it today than I've seen on it in many many months. It looks to me like a lot of old stuff is being shaken loose, plus a little bit of relatively new stuff. There are some duplicate messages, but this might be people re-posting because they didn't see their messages posted. I am also curious what happened to precipitate this. ;-] -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:53 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02366 Tue, 3 Sep 2002 16:53:53 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA20403; Tue, 3 Sep 2002 17:08:42 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma020396; Tue, 3 Sep 02 21:08:34 GMT Message-ID: Date: Tue, 03 Sep 2002 16:02:12 -0400 From: Keith Young Reply-To: "fwtk-users" Organization: V-ONE User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.1) Gecko/20020826 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] Re: Use of firewall toolkit as your company's firewall Content-Transfer-Encoding: 7bit List-Unsubscribe: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Length: 1143 Status: RO Andrew Price wrote: > The comments in the archives seem to be from non TIS/Gauntlet/NAI > personnel. My > question to the mailinig list is therefore - does anybody have anything > direct from TIS/Gauntlet/NAI confirming that use of the toolkit within a > > commercial organisation is within the scope of the licence, > alternatively does anyone have anything they could share regarding > having purchased any licences to cover their use of the toolkit > The traditional feeling from NAI was that you could: 1) use it in a commercial setting, as long as you worked for the commercial entity/company 2) could not bundle it with a for-sale product or charge for patches 3) could not redistribute it 4) could charge for assistance/consulting, but only as part of a larger consulting contract Of course, you shouldn't listen to me but should instead contact your attorney. :-) This is especially true since SC bought the product... -- -- --Keith Young -kyoung@v-one.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 16:59 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA02373 Tue, 3 Sep 2002 16:59:56 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA20558; Tue, 3 Sep 2002 17:14:46 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma020552; Tue, 3 Sep 02 21:14:14 GMT Message-ID: Date: Tue, 3 Sep 2002 17:13:32 -0400 From: Joseph S D Yao To: "fwtk-users" Cc: fwtk-users Subject: [fwtk-users] Re: Use of firewall toolkit as your company's firewall Mail-Followup-To: Keith Young , fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from kyoung@v-one.com on Tue, Sep 03, 2002 at 04:02:12PM -0400 X-Virus-Scanned: at The OSIS Center by AMaViS-perl11-milter (http://amavis.org/) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 628 Status: RO On Tue, Sep 03, 2002 at 04:02:12PM -0400, Keith Young wrote: ... > This is especially true since SC bought the product... ... But, did it? SCC bought Gauntlet, but TIS Labs [owner of FWTK] is still part of NAI. Or so I understand. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 17:15 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA02387 Tue, 3 Sep 2002 17:15:06 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA21012; Tue, 3 Sep 2002 17:29:56 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma021002; Tue, 3 Sep 02 21:29:15 GMT Date: Tue, 3 Sep 2002 17:28:20 -0400 (EDT) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: does fwtk UDP plugs In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 857 Status: RO The tool kit passes tcp traffic only. No UDP support is included. You can look at things like udp relay - or possibly socks5 for tcp/udp support. ted keller On Tue, 30 Jul 2002, fernando barreira wrote: > in other words, if i am running voice over IP to the > internet can i use fwtk to pass h323 traffic (TCP and > UDP traffic)? > > also can one create plugs for UDP based applications? > thanks. > > __________________________________________________ > Do You Yahoo!? > Yahoo! Health - Feel better, live better > http://health.yahoo.com > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 17:18 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA02392 Tue, 3 Sep 2002 17:18:08 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA21111; Tue, 3 Sep 2002 17:32:58 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma021100; Tue, 3 Sep 02 21:32:52 GMT Message-ID: Date: Tue, 3 Sep 2002 17:29:27 -0400 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Use of firewall toolkit as your company's firewall Mail-Followup-To: Keith Young , fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from jsdy@center.osis.gov on Tue, Sep 03, 2002 at 05:13:32PM -0400 X-Virus-Scanned: at The OSIS Center by AMaViS-perl11-milter (http://amavis.org/) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1558 Status: RO More on this: >From the press release: "Santa Clara and San Jose, CA, February 13, 2002 - Secure Computing Corporation (NASDAQ: SCUR), a leading provider of enterprise network access control solutions and Network Associates, Inc. (NYSE: NET), a leading provider of network security and availability solutions, today announced that Secure Computing will acquire Network Associates' Gauntlet[tm] firewall and VPN business. Network Associates' Gauntlet customers worldwide will be transitioned to Secure Computing, developers of the Sidewinder[tm] Firewall and VPN Gateway. "Under the terms of the agreement, Secure Computing will acquire the Gauntlet firewall/VPN business assets from Network Associates for an undisclosed amount; including the Gauntlet firewall/VPN software, the firewall E-ppliance product line, and all of the related customer support contracts. ..." Nothing about FWTK. Then again, software that does not command a price may not be of interest to business leeches. By contrast, there are mentions of FWTK on TISlabs [NAIlabs] Web pages, the mailing list is still out of NAI, and the ftp.tislabs.com FTP site still has FWTK stuff on it. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 17:41 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA02430 Tue, 3 Sep 2002 17:41:16 -0400 (EDT) Received: by sentry.gw.tislabs.com; id RAA21772; Tue, 3 Sep 2002 17:56:07 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma021766; Tue, 3 Sep 02 21:55:08 GMT Message-ID: Date: Tue, 03 Sep 2002 17:52:41 -0400 From: Keith Young Reply-To: "fwtk-users" Organization: V-ONE User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.1) Gecko/20020826 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "fwtk-users" CC: fwtk-users Subject: [fwtk-users] Re: Use of firewall toolkit as your company's firewall Content-Transfer-Encoding: 7bit List-Unsubscribe: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Length: 1126 Status: RO Joseph S D Yao wrote: > "Under the terms of the agreement, Secure Computing will acquire the > Gauntlet firewall/VPN business assets from Network Associates for an > undisclosed amount; including the Gauntlet firewall/VPN software, the > firewall E-ppliance product line, and all of the related customer > support contracts. ..." > > Nothing about FWTK. Then again, software that does not command a price > may not be of interest to business leeches. > > By contrast, there are mentions of FWTK on TISlabs [NAIlabs] Web pages, > the mailing list is still out of NAI, and the ftp.tislabs.com FTP site > still has FWTK stuff on it. > Actually, I spoke to someone at SC immediately after the purchase (okay, I begged for the FWTK to be GPL). He said that the SC lawyers are going to look into the FWTK further. I haven't heard anything back. Based on that, I would assume that SC still has ownership of the toolkit. -- -- --Keith Young -kyoung@v-one.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 17:52 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA02443 Tue, 3 Sep 2002 17:52:22 -0400 (EDT) Received: by sentry.gw.tislabs.com; id SAA22002; Tue, 3 Sep 2002 18:07:13 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma021986; Tue, 3 Sep 02 22:07:03 GMT Date: Tue, 3 Sep 2002 18:05:44 -0400 (EDT) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: ftp-gw problems behind a Nokia/FW-1-NG In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2744 Status: RO Michael, I suspect this is a fw-1 ftp protocol check that needs to be modified. We tend to install the following in our base.def files inside of fw1. Note - these are 4.1 type patches - but I suspect strongly that they should also be in the NG version... Ticket Note ---------------- Placed changes back Made the following changes on base.def file: 1) FIX 1: Remove the PASV newline check: --Comment out (with // marks) the following line: #define FTPPORT(match) (call KFUNC_FTPPORT <0x1|(match)>) --Uncomment out the following line: //#define FTPPORT(match) (call KFUNC_FTPPORT <(match)>) ===================================================================== 2) FIX 2: Remove the FTP control port newline check: --Comment out the following line: #define FTP_ENFORCE_NL I suspect fix2 is the one that you need. ted keller On Wed, 29 May 2002, Michael C. Ibarra wrote: > Hello: > > I've recently migrated from using FW-1 on a Solaris server > to a Nokia box running FW-1 version NG. Now, I am having some > difficulty getting ftp-gw to work. I've searched the archives > and all I have been able to find was a mention regarding data- > port. I've since then applied the data-port patch and modified > my netperm-table to include: > > ftp-gw: data-port 20 > > Unfortunately my results are still the same. Here is what my logs > from my ftp server looks like: > > May 24 16:09:50 localhost ftpd[2713]: command: USER smith^M > May 24 16:09:50 localhost ftpd[2713]: <--- 331 Password required for smith. > May 24 16:09:50 localhost ftpd[2713]: <--- 221 You could at least say goodbye. > May 24 16:09:50 localhost ftpd[2713]: FTP session closed > > As you can see, the session closes immediately after sending a request > for the users password but the client never even sees a password prompt. > Are there some other patches aside from the ones on fwtk.org for this > problem? > > My set looks like the following: > > Client(ftp's to Proxy-srvr) --> Proxy-Server(ftp-gw) --> Ftp-Server > > Both connections on either side of the Proxy-Server(ftp-gw) pass through > a Nokia box. My Proxy-Server, where fwtk lives, is running Solaris 2.8. > Proxy-Server works fine passing through old FW-1 (version 4) > > Thanks in advance. > > -mike > > Michael C. Ibarra > Hawk Technologies, Inc > http://www.hawk.com > 800.hawk.com > > -------------------------------------------------- > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 18:03 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA02470 Tue, 3 Sep 2002 18:03:26 -0400 (EDT) Received: by sentry.gw.tislabs.com; id SAA22230; Tue, 3 Sep 2002 18:18:16 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma022209; Tue, 3 Sep 02 22:17:24 GMT Date: Tue, 3 Sep 2002 18:16:38 -0400 (EDT) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: Use of firewall toolkit as your company's firewall In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1736 Status: RO So what happened to the DARPA funds that developed the fwtk? Also, in the early days, I actually purchased support for the tool-kit from TIS. That certainly implied that it was valid to operate that software in a commercial envrionment. They actually, at that time, certified the implementation on my firewall in my company.... This may mean nothing now. ted keller On Tue, 3 Sep 2002, Keith Young wrote: > Joseph S D Yao wrote: > > > "Under the terms of the agreement, Secure Computing will acquire the > > Gauntlet firewall/VPN business assets from Network Associates for an > > undisclosed amount; including the Gauntlet firewall/VPN software, the > > firewall E-ppliance product line, and all of the related customer > > support contracts. ..." > > > > Nothing about FWTK. Then again, software that does not command a price > > may not be of interest to business leeches. > > > > By contrast, there are mentions of FWTK on TISlabs [NAIlabs] Web pages, > > the mailing list is still out of NAI, and the ftp.tislabs.com FTP site > > still has FWTK stuff on it. > > > > Actually, I spoke to someone at SC immediately after the purchase (okay, > I begged for the FWTK to be GPL). He said that the SC lawyers are going > to look into the FWTK further. I haven't heard anything back. > > Based on that, I would assume that SC still has ownership of the toolkit. > > -- > > -- > --Keith Young > -kyoung@v-one.com > > > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Sep 3 18:11 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA02489 Tue, 3 Sep 2002 18:11:26 -0400 (EDT) Received: by sentry.gw.tislabs.com; id SAA22336; Tue, 3 Sep 2002 18:26:17 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma022328; Tue, 3 Sep 02 22:26:10 GMT Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1.1 Date: Tue, 03 Sep 2002 18:17:09 -0400 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Re: Change in the List? In-Reply-To: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 427 Status: RO At 01:31 PM 9/3/02 -0700, Michael St. Laurent wrote: >Did something change in the list configuration? I've seen more traffic on >it today than I've seen on it in many many months. It looks like several old postings have been reposted for some reason. -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Sep 4 06:26 EDT 2002 Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA03822 Wed, 4 Sep 2002 06:26:57 -0400 (EDT) Received: by sentry.gw.tislabs.com; id GAA02770; Wed, 4 Sep 2002 06:41:49 -0400 (EDT) Received: from listserv.nai.com(161.69.213.6) by sentry.gw.tislabs.com via smap (V5.5) id xma002762; Wed, 4 Sep 02 10:41:29 GMT From: ark@eltex.ru Date: Wed, 4 Sep 2002 14:30:15 +0400 Message-Id: In-Reply-To: from ""Rabinowitz, Ari (Exchange)" " Organization: "Klingon Imperial Intelligence Service" Subject: [fwtk-users] Re: Has anyone written an LDAP authentication module? To: "fwtk-users" X-Virus-Scanned: by Eltex TC List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text Content-Length: 1011 Status: RO Actually we need an authsrv rewrite, probably capable of talking to various authentication backends including raidus and ldap. I am working on one but it takes very long time :( "Rabinowitz, Ari (Exchange)" said : > Hi, > > I've been looking in the archives, the contributed patches, and the FAQ, but > I don't see any mention of an LDAP authentication module. Is no one using > and LDAP directory server to keep the authentication information? > > Anyone have any suggestions, other than my writing it myself :-) > > Thanks, > Ari _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com