NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] MS Proxy and Unknown Established TCP packet



Hello,

I assume you are running the ISA Servers as a cluster. I once had the same
problem with iPlanet Webservers. The cause was that the webservers sent an
additional TCP packet after the connection was already closed. As far as I
can remember this could be fixed by changing the cluster settings.

With proxies you often can see that phenomenon if they try to reach a
webserver (that resolves over DNS) but is ont reachable coz of a routing
issue or coz it is down.

--Joerg


-----Original Message-----
From: Hawkins, Michael
To: [email protected]
Sent: 2/20/02 5:22 PM
Subject: [FW-1] MS Proxy and Unknown Established TCP packet

> We have two MS ISA proxy servers working as http caches inside our
> network.
> They go through our Nokia's.
>
> Ever since we put these proxies in place I now get hundreds of
"Unknown
> Established TCP packet" rule 0 drops that have the ISA servers as the
> destination.
>
> Has anyone seen this before with MS ISA or proxies? It must be the
> behavior
> of the proxies themselves?!?
>
> And turning off logging established TCP packets is not an option!
>
Platform: Nokia IPSO 3.2.1
Checkpoint version 4.1

> Thanks
>
> Mike H
>
>
>
>
<<Disclaimer>>

This electronic mail is intended only for the use of the addressee(s)
named
herein. Unless otherwise specifically stated, the views contained and
expressed in this electronic mail are strictly those of the individual
sender and are not the views of the Company or any of its Directors or
other
employees. If you are not the intended recipient of this electronic
mail,
you are hereby notified that any dissemination, distribution or coping
of
this electronic mail is strictly prohibited. If you received this
electronic
mail in error please immediately notify us by return electronic mail and
delete this electronic mail from your system.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.