After the mainframe people installed IP on their MVS (OS390?) and tried to access IPs on the internet I see its SYN packets dropped by our FW-1 with rule 0. Looking at the snoop output it seems that there are no IP options but there are more TCP options than for instance NT does in its SYNs. I cannot seem to find any settings that would do this... FW-1 3.0b is being run on a Sun Sparc. Anyone with the same problem? Anyone have MVS users and everything working correctly? In that case, what IP stack are you using? Are there more than one? IBM just said that the firewall was doing something wrong... ----- Mikael Abrahamsson email: [EMAIL PROTECTED] - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
