This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

http/https [ACK FIN] drop

Hi,

I have many drop for [ACK FIN] http/https traffic. Even for the connexion to the utm webadmin page :
2014:03:20-15:31:37 Firewall ulogd[31492]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth0" srcmac="80:ee:73:69:73:83" srcip="192.168.1.1" dstip="192.168.1.103" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="4444" dstport="63912" tcpflags="ACK FIN"

Is there a way to remove/hide them ?

Thanks.

This thread was automatically locked due to age.

Parents

0 BarryG over 11 years ago

I believe that web servers and clients try to keep the connection open a long time, and IPTables eventually gets tired and discards it in conntrack.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 11 years ago

I believe that web servers and clients try to keep the connection open a long time, and IPTables eventually gets tired and discards it in conntrack.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data