Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 2173 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

blocked incoming ack/psh packets

adminVMW
I don't consider myself to be an expert but I think I have set up the right configuration for our internal network to surf while blocking all unwanted incoming/outgoing. Every once in a while I see a ack or ack/psh package from a.b.c.d:80 to internal:>1024.
I don't know if our users are bothered with this as I never hear anything. How can I easily accept these packages or shouldn't I?

(important) rules are:
from service to action
localnet {internet} any allow
localnet any WAN allow
WAN any localnet allow
any any broadcast8/32 drop
any any any deny

{internet} contains dns, http & https

[ 08 March 2002: Message edited by: adminVMW ]



This thread was automatically locked due to age.
Parents
  • 0
    adminVMW,

    you shouldn't :-)
    Bad Idea to open the firewall port 80 -> port > 1024
    for any ;-)

    These are packets to sessions which are already timed out!
    Just check it by entering the IP addresses in
    your browser.

    Regards
    ollion
Reply
  • 0
    adminVMW,

    you shouldn't :-)
    Bad Idea to open the firewall port 80 -> port > 1024
    for any ;-)

    These are packets to sessions which are already timed out!
    Just check it by entering the IP addresses in
    your browser.

    Regards
    ollion
Children