This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG-> TCP Packets with invalid flag combination

Hello Folks,

 

well i got a problem with my Synology Storage. Lets get the information down.

 

My Computer (192.168.0.20, LAN Zone) wants to watch a video on my Synology (192.168.10.10, DMZ). But my VLC Player can't play the file. In the logs i see the following: 

messageid="01001" log_type="Firewall" log_component="Invalid Traffic" log_subtype="Denied" status="Deny" con_duration="0" fw_rule_id="0" policy_type="0" user="" user_group="" web_policy_id="0" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" in_interface="" out_interface="" src_mac="" src_ip="192.168.0.20" src_country="" dst_ip="192.168.10.10" dst_country="" protocol="TCP" src_port="60168" dst_port="17035" packets_sent="0" packets_received="0" bytes_sent="0" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="" src_zone="" dst_zone_type="" dst_zone="" con_direction="" con_id="" virt_con_id="" hb_status="No Heartbeat" message="TCP Packets with invalid flag combination." appresolvedby="Signature"

 

I really dont know what is happening. My Rule:

 

What can i do to get my connection working?

The Synology got only 1 LAN-Connection. Edit: When i will place the Synology into the LAN (192.168.0.10) all is working fine. But that is not my intention. 

 

Thanks guys! Kind regards,

Chris



This thread was automatically locked due to age.
Parents
  • Hi,

    basically that error shows your rule is being ignored.

    I hope that isn't your rule because it is incomplete? I would check your destination configuration.

    I suspect rather than a firewall rule you need a routing rule.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • Hi,

    basically that error shows your rule is being ignored.

    I hope that isn't your rule because it is incomplete? I would check your destination configuration.

    I suspect rather than a firewall rule you need a routing rule.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Children