Showing posts with label Bugs. Show all posts
Showing posts with label Bugs. Show all posts

Saturday, May 2, 2009

FTP Multiline 221 Bug in FWSM

This is one I ran into recently.

Link to Cisco Bug Toolkit
Will need CCO Login
CSCsi27512 Bug Details
FTP with multiline 221 lines closes the connection too early
Symptom:
FTP client / server do not close their connection in some cases when the server
uses multiline 221 closure sequence.

Conditions:
When some OS is used (not all of them, not identified properly) and the server uses
multi line 221 closure sequence like:

221-You have transferred 0 bytes in 0 files.
221-Total traffic for this session was 2551 bytes in 1 transfers.
221-Thank you for using the FTP service on orbi.
221 Goodbye.

instead of the classic
221 Goodbye;

Workaround:
1. Disable ftp inspection OR disable 221 mutliline.
or
2. if running a version of FWSM code where the command is supported, you can disable the TCP Normalizer feature which has minimal impact. Disable the normalizer with the command:
"no control-point tcp-normalizer"
or
3. If running in an active/standby failover mode setup, a forced switchover should alleviate the problem. If not running a failover mode that is if there i no failover pair, but have failover enabled, then a "no failover" and "failover" [i.e disabling and enabling failover] should help.