Sophos Firewall

Discussions WebServerProtection: Answerpacket dropped by Firewall - message="Could not associate packet to any connection."

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 27 subscribers
Views 1829 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WebServerProtection: Answerpacket dropped by Firewall - message="Could not associate packet to any connection."

dirkkotte over 5 years ago

Hi,

Sometimes my WAF connection is really slow loading a WebPage.

At this time i have dropped packets from packetfilter and the Message "Could not associate packet to any connection."

8083 is the server HTTP-port. 192.168.10.11 is the server IP. def. GW (Sophos SG) 192.168.10.254

An idea why answer-packets should be dropped?

This thread was automatically locked due to age.

0 Keyur over 5 years ago

Hi dirkkotte

Please refer to this article - https://community.sophos.com/kb/en-us/131754
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago

Do you configure / Reload the WAF Rule at this time?

Because those dropped packets simply means, the conntrack table are flushed and XG is dropping them.

Slow WAF connection should not be related to those drops.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 5 years ago in reply to LuCar Toni

no, i don't reconfigure or restart something at this time.

i see, most of the dropped packets are FIN flagged.

So there packets should be not a problem ...

... but why my webpage is so slow and bumpy to these times.

From within LAN the webserver has no problems.
Cancel
Vote Up 0 Vote Down

Cancel