On Mon, 27 May 2002, Antony Stone wrote: > Hmmm. Oh well, there goes that idea - those routing tables look perfectly > sensible to me... > > Can you put a packet sniffer (eg ethereal, tcpdump) on the link between the > firewall and the web server, and see what Syn / Syn-Ack packets you find ?
I was unable to capture packets in between, could this be the switch that we use for the LAN? It's a Cisco Catalyst 3500 24 ports ethernet switch. Therefore I used ethereal on the internal webserver; I saw that at least the webserver get the SYN requests and sends back SYN,ACK. That as far as it gets. I put the ethereal files here: http://www.terena.nl/~dick/session.bad (binary file) http://www.terena.nl/~dick/session.bad.txt (txt file) Thanks, -- Dick Visser TERENA IT-support Singel 468D, 1017 AW, Amsterdam, The Netherlands Phone: +31 20 5304488 Fax: +31 20 5304499 Email: [EMAIL PROTECTED] http://www.terena.nl Live webcam: http://www.terena.nl/~dick/cam2.asx PGP-key: http://www.terena.nl/~dick/pgp.key.asc