CheckPoint Firewall

Document ID: 10177

Synopsis

Sending to CheckPoint Firewall SMTP server times out.

More Information

CheckPoint Firewall Sending to CheckPoint Firewall SMTP server times out. When sending messages to a CheckPoint Firewall SMTP service MailSite delivery agent times out because the CheckPoint Firewall SMTP service is not RFC compliant and does not terminate iitial SMTP handshake procedure, as shown below: SMTP response should be something along these lines: 250-text 250-more text 250-More status about the server 250-Describes the capabilities 250-The first line to start with "250 " 250-Is the last line of the response 250 ready. The - (dash) means a continuation of the response, so the checkpoint firewall does not end that continuation: Example SMTPDA to Checkpoint SMTP handshake SMTPDA log entry made at 07/12/2002 11:58:55 220 CheckPoint FireWall-1 secure ESMTP server EHLO smtp1.turk.net 250 Hello smtp1.web.net, pleased to meet you 250-SIZE <----does not terminate here, not RFC compliant> 451 Timeout... Closing connection. <--mailsite times out> so after the 250-SIZE should be: 250 ready <--sends a signal to remote server that its ready receive data, note the - is missing> Checkpoint reports that this is a known issue with the Checkpoint firewall SMTP service and that a hot-fix is available. In order to obtain the hot-fix, Checkpoint Firewall owners need to call Checkpoint technical support.