CheckPoint Firewall
Document ID: 10177
Synopsis
Sending to CheckPoint Firewall SMTP server times out.
More Information
CheckPoint Firewall
Sending to CheckPoint Firewall SMTP server times out.
When sending messages to a CheckPoint Firewall SMTP service MailSite delivery agent times out because the CheckPoint Firewall SMTP service is not RFC compliant and does not terminate iitial SMTP handshake procedure, as shown below:
SMTP response should be something along these lines:
250-text
250-more text
250-More status about the server
250-Describes the capabilities
250-The first line to start with "250 "
250-Is the last line of the response
250 ready.
The - (dash) means a continuation of the response, so the checkpoint firewall does not end that continuation:
Example SMTPDA to Checkpoint SMTP handshake
SMTPDA log entry made at 07/12/2002 11:58:55
220 CheckPoint FireWall-1 secure ESMTP server
EHLO smtp1.turk.net
250 Hello smtp1.web.net, pleased to meet you
250-SIZE <----does not terminate here, not RFC compliant>
451 Timeout... Closing connection. <--mailsite times out>
so after the 250-SIZE should be:
250 ready <--sends a signal to remote server that its ready receive data, note
the - is missing>
Checkpoint reports that this is a known issue with the Checkpoint firewall SMTP service and that a hot-fix is available. In order to obtain the hot-fix, Checkpoint Firewall owners need to call Checkpoint technical support.