TCP packet out of state 1

[JeeLooP]

FW-1 NOKIA 530
FP2

Hi ebdy,

What does it mean "th_flags message_info TCP Packet out of state" on FW-1 Log viewer ?

Thx

 

[TheOldMan346]

Found this in a newsgroup:

Cause: This error means that VPN-1/FireWall-1 intercepted a non-Syn packet which does not have an entry in the FireWall's connections table. FireWall-1 will therefore drop the packet.

Here is the link to the document:

http://www.firewall-1.org/2002-03/msg00111.html

Hope that helps.
The Old Man

 

[jpm121]

For anyone else that's interested, it's possibly a type of Denial of Service attack, based on attempting to crash a server by using all its memory to create phantom connections on all available ports.