Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 1835 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WebServerProtection: Answerpacket dropped by Firewall - message="Could not associate packet to any connection."

dirkkotte

Hi,

Sometimes my WAF connection is really slow loading a WebPage.

At this time i have dropped packets from packetfilter and the Message "Could not associate packet to any connection."

8083 is the server HTTP-port. 192.168.10.11 is the server IP. def. GW (Sophos SG) 192.168.10.254

An idea why answer-packets should be dropped?

 



This thread was automatically locked due to age.
Parents
  • 0

    Do you configure / Reload the WAF Rule at this time? 

    Because those dropped packets simply means, the conntrack table are flushed and XG is dropping them. 

    Slow WAF connection should not be related to those drops. 

     

    __________________________________________________________________________________________________________________

Reply
  • 0

    Do you configure / Reload the WAF Rule at this time? 

    Because those dropped packets simply means, the conntrack table are flushed and XG is dropping them. 

    Slow WAF connection should not be related to those drops. 

     

    __________________________________________________________________________________________________________________

Children
  • 0 in reply to LuCar Toni

    no, i don't reconfigure or restart something at this time.

    i see, most of the dropped packets are FIN flagged.

    So there packets should be not a problem ...

    ... but why my webpage is so slow and bumpy to these times.

    From within LAN the webserver has no problems.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Cookie Information Banner