Re: [FW1] unknown established TCP packet - SP2

[Lance Spitzner <lance@FW1-NOSPAMspitzner.net>]

On Fri, 8 Dec 2000, Ken Blinco wrote:

> WE are having the problem of dropped packets after installing SP2.  The
> packets are dopped on rule 0 with the following log: "unknown
> established TCP packet"

> I would like to know why these connections are being dropped (they are
> will within the tcp timeout period).  Why is the state-table so
> sensitive now?  Can we fix this?  

Detailed paper on the FW-1 state table and why you are getting these 
errors.

Understanding Your FW-1 State Table
http://www.enteract.com/~lspitz/fwtable.html

lance



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================