Re: [FW1] unknown established tcp packet

["Jason Witty, CISSP" <jason@FW1-NOSPAMwittys.com>]

http://www.phoneboy.com/faq/0408.html .  HTH.

Jason

At 10:19 AM 4/20/01 +0200, Hartmann, Josef wrote:
>
>Hi,
>
>
>still I am trying to setup Legato Networker Backup in a DMZ over FW-1
>4.1SP3.
>Unfortunately it does not complete as the status messages are lost (as far
>as I can tell by know).
>
>These messages are sent over a tcp connection; the connection is established
>properly (SYN, SYN/ACK, ACK -> FW-1 accepts these packets) then it takes
>about 4min, 5min during them no packets are transmitted, after that packets
>are transmitted however these are dropped by FW-1 (info field: unknown
>established tcp packet).
>Now I don't know exaclty why: TCP session timeout is set to 600s, connection
>is established and the session timeout is not yet down to zero.
>
>
>Cheers,
>
>Josef
>
>
>===========================================================================
=====
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================