FTP Bounce Attack

[ManojK_1]

In Our production environemnt we are using ftp to transfer some files from HP Unix Server (11.23) to Windows NT Server.

We found that daily two or three times the ftp is failing and more than 100 times it is working fine.

While searching for the issue and solution our security team told us that firewall is dropping this ftp becuase of the vulnerability "FTP Bounce Attack", the servers are using port 227 for file transfer instead of 21.

Can somebody advice on this. FTP Version wuftpd-2.6.1

Thanks and Regards,
Manoj K

[Suraj K Sankari]

Hi,
>>We found that daily two or three times the ftp is failing and more than 100 times it is working fine.

Every day at what time its failing, did you noticed that?

Did you check the syslog.log file any error message are there ?

Suraj

[ManojK_1]

Hi,

There is no specific time for the failure, it is happening randomly.

No messages in syslog regarding this failure.

Thanks and Regards,
Manoj K