[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-1
Subject:    Re: [FW-1] TCP Packet out of State. Server to Client of an old TCP connection tcp_flags: RST-ACK
From:       Hugo van der Kooij <hvdkooij () VANDERKOOIJ ! ORG>
Date:       2007-10-26 5:36:45
Message-ID: 47217CED.7030704 () vanderkooij ! org
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alex Hayes wrote:
> I established the connection via browser port 80 and the session was dropped.  I \
> see in the firewall log and the following message appears. 
> TCP Packet out of State. Server to Client of an old TCP connection tcp_flags: \
> RST-ACK

Are you sure that webserver works? While it is odd to send a RST-ACK on
a SYN packet but it might very well be a way to deny traffic by the
server to certain clients.

Hugo.


- --
hvdkooij@vanderkooij.org               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFHIXzpBvzDRVjxmYERAhglAKCFuJB6SBounEUJ0HKqlB4QDQ5xDwCfaCBv
woU6MpUfaQcmwxWvljMoIoU=
=7P/r
-----END PGP SIGNATURE-----

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================


[prev in list] [next in list] [prev in thread] [next in thread]