[FW1] unknown established tcp packet

[MikeCC]

Hello,

I am running Nokia firewalls, IPSO 3.3 FW-1 4.1 sp2.

When I telnet, ssh or http, basically any tcp session to a server behind 
the firewall I see the packet from my workstation go through.  However, I 
then see the return packet dropped on rule 0 with the message, unknown tcp 
established packet.

I temporarily turned off flows to see if I was somehow running into the 
problem of the flows table not having the table correctly built.  But that 
did not alleviate the problem.

Has anyone else seen this kind of behavior or have any suggestions?


MikeCC
http://atrek.org/mikecc



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================