I've got several users accessing exchange through a Nokia 650 running FW-1 v4.1 SP2.  Several users have been complaining about slow connections to the MS Exchange server.  When checking the logs, I see several drops on Rule 0, with the infamous 'Unknown established connection' message. 
 
I tried adding '#define ALLOW_NON_SYN_RULEBASE_MATCH'  to $FWDIR/lib/fwui_head.def like Phoneboy's site said, but their doesn't appear to be any change after cycling the firewall.  Can anyone tell me how to revert to the old behavior, or find out why my change to fwui_head.def was not accepted?  It looks like these drops are causing the client to sit and wait for it's timeout, rather than retry immediately.  I'm sure rejects would probably help, but I can't find a way to do that either.
 
Thanks in advance for the help!
 
Jeff Jarmoc - CCNA, MCSE
Network Analyst - Grubb & Ellis

Reply via email to