NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SMTP and Unknown Established TCP packet



> We found out that SMTP connections to many sites took *long* times to
> establish. We demonstrated that in that particular case the problem was
> lousy service from the ISP, since many sites had problems when connections
> were attempted. Connections were being dropped (out of state) since it took
> longer than the "handshake" timeout to start exchanging traffic. We
> worked-around it taking the 60s default timer to 300s, and advised the
> customer to talk to their service provider.
...
> Who knows, maybe you are experiencing that same problem. Let us know how it
> went!
The problems being described here sound exactly like an ident timeout is
causing the problem. Please make sure that you are _rejecting_ ident
traffic to your mail server. If not, some remote systems attempt to
perform an ident lookup, and that reverse connection is dropped by your
firewall. By the time that ident connection times out, and the mail
server goes back to the SMTP session, the connection has also timed out.

Just an idea.

-don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.