Re: CP FW-1 next generation: TCP Packet out of state

Article View: comp.security.firewalls

Article #432

Back to comp.security.firewalls Previous Next

#432

From: Neil Desai
Date: Sat, 06 Oct 2001 22:25

21 lines
1675 bytes

You might want to increase the TCP timeout or change the parameters to allow
non SYN packets to create and entry in the state table.
Neil
" mayer hans " <mayer@relay.bfl.at> wrote in message
news:1002308196.894052@bfl-ea1...
>
> hi all
>
> i installed cp next generation on sparc solaris 8
> and see a lot of messages like this in the log
> with service "notes":
>
> th-flags 11 message info: TCP Packet out of state.
>
> any idea, what to do ?
> it seams, that those packets are droped.
>
> --
> best regards from vienna           |
> hans                               |   mayer (at) relay.bfl.at_SPAM
>

Technical Details

Message-ID: <tbYpWUrTBHA.254@dogwood.us.checkpoint.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news.tele.dk!small.news.tele.dk!144.212.100.101!newsfeed.mathworks.com!news.mathworks.com!uunet!nyc.uu.net!news.hks.com!dogwood.us.checkpoint.com

References: <1002308196.894052@bfl-ea1>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,8f938ab63db9f2d7
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,8f938ab63db9f2d7
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2001-10-06 15:30:20 PST
Reply-To: "Neil Desai" <ndesai01@tampabay.rr.com>
From: "Neil Desai" <ndesai01@tampabay.rr.com>
References: <1002308196.894052@bfl-ea1>
Subject: Re: CP FW-1 next generation: TCP Packet out of state
Date: Sat, 6 Oct 2001 18:25:08 -0400
Lines: 23
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Message-ID: <tbYpWUrTBHA.254@dogwood.us.checkpoint.com>
Newsgroups: comp.security.firewalls,cp.products.firewall-1
NNTP-Posting-Host: 6532110hfc176.tampabay.rr.com 65.32.110.176
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news.tele.dk!small.news.tele.dk!144.212.100.101!newsfeed.mathworks.com!news.mathworks.com!uunet!nyc.uu.net!news.hks.com!dogwood.us.checkpoint.com

Reply to Parent Message