[FW1] unknown established tcp packet

[Hartmann, Josef]

Hi,


still I am trying to setup Legato Networker Backup in a DMZ over FW-1
4.1SP3.
Unfortunately it does not complete as the status messages are lost (as far
as I can tell by know).

These messages are sent over a tcp connection; the connection is established
properly (SYN, SYN/ACK, ACK -> FW-1 accepts these packets) then it takes
about 4min, 5min during them no packets are transmitted, after that packets
are transmitted however these are dropped by FW-1 (info field: unknown
established tcp packet).
Now I don't know exaclty why: TCP session timeout is set to 600s, connection
is established and the session timeout is not yet down to zero.


Cheers,

Josef


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================