This is a known problem with Firewall-1 1.0.7 and is fixed
in Firewall-1 1.2
The problem is that Netscape is executing an ftp transfer in passive
mode, which has the local host making the ftp connection to the remote
host dependant on the remote host to provide the port number for the
Firewall-1 in 1.0.7 is much better in tracking the port number that
is going to be used for the data transfer when it comes from the
Contact your vendor from which you obtained 1.0.7 and find
out about upgrading to 1.2.
/\ Jerald E. Josephs
\\ \ Technical Support Engineer - Networks
\ \\ / SunService - North American Solution Center
/ \/ / /
/ / \//\ Phone/VM: 415-336-9558
\//\ / / FAX: 415-960-0572
/ / /\ / E-mail: jerald .
/ \\ \
\/ "Liberals feel unworthy of their possessions,
conservatives feel they deserve everything they have stolen"
--- Mort Sahl
>From firewalls-owner @
COM Mon Jul 24 06:21 PDT 1995
>X-Sender: jnb @
>Date: Mon, 24 Jul 1995 07:33:47 -0400
>To: Harold van Aalderen <harold @
nl>, firewall-1 @
>From: jim .
com (Jim Brown)
>Subject: Re: firewall-1: Netscape cannot handle ftp://ftp.domain URI through firewall
>Cc: firewalls @
>I have heard of this same problem on GreatCircle's generic
>firewall list. As I recall, the problem is with Netscape's
>Navigator and the way ports it tries to use.
>Maybe someone else can shed more light on this ...
>At 11:12 AM 7/24/95 +0200, Harold van Aalderen wrote:
>>I have a problem with access our anonymous ftp server with netscape
>>through the firewall.
>>When I use a normal ftp client to access our anonymous server all
>>works fine. However if I use the URI ftp://machine.domain with netscape
>>it doesn't work.