problem: only one way (ssh/ftp) allow between two firewall server

machine A --> firewall1 (fw1, SuSE 10.2, upgrade from 9.1) --> fw2 --> machine B (SuSE 9.1)

problem 1.

problem is when I ftp from A to B, I can login fine, but no further action, when I do put, it will stuck. And it only create a file on machine B, and size is zero.

ftp> put zone.txt
500 Invalid PORT Command.
150 Opening BINARY mode data connection for zone.txt


problem 2.

I can ssh from A to B with no problem, but B can't ssh to A, it says

can't not connect to B port 22, no route to host.

what could be wrong. The only thing change is OS from 9.1 to 10.2, all configuration file is the same.


Please please advise.