NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] OUT OF STATE PACKETS


  • To: [email protected]
  • Subject: Re: [FW-1] OUT OF STATE PACKETS
  • From: "Laidlaw, Rob" <[email protected]>
  • Date: Wed, 20 Aug 2003 09:33:28 -0500
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcNnIicLAO098uXYSyK9dLXgbrXKQAABauzw
  • Thread-topic: OUT OF STATE PACKETS

I have had a problem with ng fp2 (no hot fixes) not resetting the connection timer and thus every packet is then out of state.  I was told that hot fix 2 fixes this problem but I went right to fp3 and that did it for me.  GL.

-----Original Message-----
From: Jason Cameron [mailto:[email protected]]
Sent: Wednesday, August 20, 2003 8:51 AM
To: [email protected]
Subject: [FW-1] OUT OF STATE PACKETS


I am currently running a citrix server( on dmz subnet ) with a published app accessing another server's  database on a private lan subnet .
These subnets are directly connected to the nokia ip 330 ng fp2 cluster I am running . I also have dial-up customer's accessing the
published application on the citrix server.
The problem is I experience a huge amount of " out of state " packets in the fw log between the citrix server and the database server on the private Lan ,
I have checked the nic settings on the server s ( set to 100 Full dup ) and on the switches there is no auto -negotiation.
I wonder has anyone set up this solution with dialup clients and wan clients using citrix published app to access a swift alliance access database ?. I dont understand why there would be so many out of state packets ?.
Is the tcp timeout value to low or is it the drop out of state udp packets ?

Thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
Disclaimer - 08/20/2003
This information in this email is confidential and may be legally privileged. It is intended solely for Mailing list for discussion of Firewall-1.  Access to this Internet email by anyone else is unauthorized.

EnvestnetPMC, Inc. does not accept time-sensitive transactional messages, including orders to buy and sell securities, account allocation instructions, or any other instructions affecting a client account, via e-mail.

If you are not the intended recipient of this email, any disclosure, copying, or distribution of it is prohibited and may be unlawful.  If you have received this email in error, please notify the sender and immediately and permanently delete it and destroy any copies of it that were printed out.  When addressed to our clients, any opinions or advice contained in this email is subject to the terms and conditions expressed in any applicable governing EnvestnetPMC terms of business or agreements.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.