TFTP and firewalls.

[Brian May <bam@debian.org>]

Hello,

I know of a organisation here, which needs to boot CISCO routers, via
TFTP, past a firewall.

This sounds easy in theory, just modify the firewall to pass UDP
packets with the TFTP port unchanged.

However, it doesn't work in practise; only the first packets get sent
to/from the TFTP port, the later packets get sent to/from another port
(a bit like FTP).

So, the firewall has to be modified to allow *all* UDP packets through
from the particular computer.

I was wondering if there were any easy solutions to this problem
(apart from adding a new & unwanted computer on the other side of the
firewall)?

Do all TFTP servers act in the same way?
-- 
Brian May <bam@debian.org>