topic Re: How can I stop checkpoint FTP server listening on public IP interface in General Topics

How can I stop checkpoint FTP server listening on public IP interface

Metro_Support_A — Thu, 21 Mar 2019 11:48:33 GMT

I found that ftp command with public IP interface of the checkpoint gateway response all of the IP addresses on my public interface subnet. (Also with telnet port 21 command)

Although the connection close or timeout but it is still shown the message '220 Check Point FireWall-1 Secure FTP server running on XXX' when I try to using ftp x.x.x.x.

I try to block this FTP access from internet by creating stealth rule for my public IP destination with FTP service. It's work. But I still don't know why the gateway response FTP connection like this and I want to disable it.

I'm using 4600 running R77.30 Gaia.

Re: How can I stop checkpoint FTP server listening on public IP interface

PhoneBoy — Fri, 22 Mar 2019 05:05:05 GMT

What version of code?
Also what rules do you have that are specific to FTP?
Any of them with an action of User Auth or include a Resource (FTP->Something)?

Re: How can I stop checkpoint FTP server listening on public IP interface

Wolfgang — Fri, 22 Mar 2019 07:09:55 GMT

Check if you have defined a FTP-ressource and a rule with this ressource. This enables CheckPoints FTP SecureServer running like a HTTP-proxy.