Dear Peter,
I've encountered the same problem after SP2, I can't quite recall how to fix
it. It think, it was a connection between Firewalls themselves, one of the
FW-1 protocols that should be included with "allow FW-1 control
connections". I added some rule explictitly allowing Firewall-1 - protocols
between the machines.
Sorry, I can't tell you more.
Regards,
Daniel
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of WAN
> Admin
> Sent: Wednesday, August 23, 2000 8:28 AM
> To: '[EMAIL PROTECTED]'
> Cc: '[EMAIL PROTECTED]'
> Subject: [FW1] unkown established TCP packet
>
>
>
>
> Ver: 4.1 SP2
>
> I am having trouble connecting to several HTTP and FTP sites. I've noticed
> in the logs that the connections are being dropped with the
> message "unknown
> established TCP packet".
>
> The two main sites are hotmail.com and ftp.compaq.com (pretty
> major sites).
> I'm pretty sure that the rule base is configured correctly because other
> sites are access without an issue. All of our users connect to
> the internet
> via MS Proxy but even if I fire up a browser or FTP program and access
> directly I get the same message.
>
> I also see a lot of inbound SMTP connections being dropped with the same
> message (usually the same set of sites). I've found reference to
> this issue
> on PhoneBoy's web site but it doesn't really say if it is a
> problem or not,
> just how to prevent the messages from appearing in the logs.
>
> I'm pretty sure that I didn't have this problem before upgrading to SP2.
>
> Welcoming any comments,
>
> Peter J
>
>
>
>
> *************************************************************
> This email and any files attached are considered
> confidential and intended solely for the use of the
> individual or entity to whom this email is addressed.
> If you have received this email in error please notify :
> ( [EMAIL PROTECTED] )
> This footnote also confirms that the above email has been
> scanned for the presence of computer viruses.
> *************************************************************
>
>
> ==================================================================
> ==============
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ==================================================================
> ==============
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
