Morning, the version is R70.20 is a cluster, I don't have problem with the http traffic. The major problem that we have is with NCP protocol from Novell, that's tcp 524 y udp 289. But when an user is doing a login, printing, to our network resources and when the tree syncronization is doing, this packet out of state is happening.
________________________________ From: Soeren Baum <[email protected]> To: [email protected] Sent: Thu, March 4, 2010 6:37:49 AM Subject: Re: [FW-1] TCP Packet out of state : First packet isn't SYN tcp_flags :PUSH-ACK we upgraded from R65 HFA 40 a month ago, but with the same problems on the older version > Soeren Baum a écrit : > >> Hello all, >> >> i have the same error on a R70.20 Cluster for http traffic for spec. >> websites >> TCP timeout is set to 60sec, HTTP is synced >> Dont check for TCP out of state, isnt an option i believe >> >> Which other possibilities are there, to solve such issues? >> > check the drop reason with "fw ctl zdebug drop" on the gateway. > > did the issue occurs first with r70.20 ? > >> regards >> > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
