topic Re: ftp intermittent problems in firewall module in Network Security

ftp intermittent problems in firewall module

Norberto Salgado — Mon, 11 Mar 2019 16:41:13 GMT

Hi,

we have an WS-SVC-FWM-1 in a 6506 chassis. With an IOS version: 12.2(18)SXF12a and a software version 3.2(2).

Sometimes and without any apparent reason the ftp connections stop to work. To the ftp connections start to work again we have to take off the "inspect ftp" and put it again.

Anyone already had this problem or can suggest troubleshooting for it?

Thank you.

Best regards,

Re: ftp intermittent problems in firewall module

Kureli Sankar — Sat, 21 Nov 2009 01:58:00 GMT

How long does it work before failing? When it breaks and before you toggle inspect ftp have you looked at the syslogs to see what may be happening?

I have not heard of this issue but, would certainly like to investigate this further.

pls. enable logging

conf t

logging on

logging buffer 7

sh logg | i 10.10.10.1

where 10.10.10.1 is the IP address in question.

Let us know what you see when it breaks.

Re: ftp intermittent problems in firewall module

Norberto Salgado — Tue, 24 Nov 2009 17:17:09 GMT

Hi Kusankar,

thank you for your reply.

The problem it's a bit different that what I reported you first.

The ftp don't stop to work, only the "quit" command does.

It seems that it stops to receive the flag "F", when the command "quit" it's issued by the client. The ftp client need to kill the process, to the ftp connection be closed.Or we have to take off the "inspect ftp".

The problem it's that we have machines with ftp scripts configured, and then the machines stay full of ftp connections and processes running.

I will add some logs later. Can I use tcp time-out as workaround?

Thank you.

Best regards,

Re: ftp intermittent problems in firewall module

Kureli Sankar — Tue, 24 Nov 2009 17:45:19 GMT

Does this break after the FWSM module has been up for more than 50 days?

CSCsi27512 You may be running into this issue.

Resolved in 004.000(000.037) 003.002(005.001) 003.001(010) 003.001(009.005)

Does the issue get resolved if you failover?

Re: ftp intermittent problems in firewall module

Norberto Salgado — Tue, 24 Nov 2009 20:15:26 GMT

That makes sense...

The FWSM it's up at almost 1 year.

I didn't try the failover, cause the client need to schedule an intervention to do this.

In the client I didn't saw all this sequence after the quit:

221- You have transferred 0 bytes in 0 files.

221- Total traffic for this session was 2551 bytes in 1 transfers.

221- Thank you for using the FTP service on orbi.

221- Goodbye

I only see:

You have transferred 0 bytes in 0 files.

I will try to disable the 221 multiline and disable the TCP normalizer, and I let you know the results.

Thank you!

Best regards,

Re: ftp intermittent problems in firewall module

Kureli Sankar — Tue, 24 Nov 2009 20:26:53 GMT

I am 100% sure this is the defect that you are running into.

upgrade the code at the next opportunity.

Good luck.