Re: Problem with Sonicwall XPRS SNY-ACK not being recieved

From: Søren Skovgaard (sskovgaard_at_deletethis_yahoo.dk)
Date: 02/11/04 

Date: Wed, 11 Feb 2004 20:08:12 +0100

Hi Nick !

I'm sitting behind af TrendNet TW100-BRF104 firewall, and it works fine ;-)

My regards
Søren

"Nick Rohm" <Nickoftime@Rocketmail.com> wrote in message
news:767296b7.0402110758.22ee119b@posting.google.com...
> Ok I don't know wether or not this is a problem on my end or the
> remote website end but we have a customer that none of the PC's behind
> our firewall can reach their Website. It is the only website anyone
> has problems with but for the life of me I don't know why. Here is
> what I found so far. Client behind firewall (192.168.x.x) sends a SYN
> packet (62 Bytes) to 194.76.144.6 (www.innomotive.com), Packet is sent
> out on the public IP of our Sonicwall XPRS (65.42.x.x)(62 Bytes), The
> Remote Site sends back just a ACK packet (62 Bytes) and the connection
> to the client behind the firewall is never made so the client then
> send out another SYN packet. I attached the log below. Strange thing
> is that I have a few computers on the DMZ and I also have a few
> Computer that have a NAT'd Public IP address in the Private LAN (EMail
> Server Etc..) they all can browse this site with no problems at all at
> the Communication loos normal. Any ideas, I am getting a lot of heat
> because of this, It is a big customer.
>
> Firewall Packet Trace Log:
>
> 1
> 02/10/2004 15:11:25.512 TCP received on LAN [SYN] 62 bytes
> From 192.168.x.x / 3800 (00:00:a2:e1:a1:77)
> To 194.76.144.6 / 80 (00:40:10:13:11:d8)
> 2
> 02/10/2004 15:11:25.512 TCP sent on WAN [SYN] 62 bytes
> From 65.42.x.x / 49632 (00:40:10:13:11:d8)
> To 194.76.144.6 / 80 (00:06:53:2b:d3:e0)
> 3
> 02/10/2004 15:11:25.624 TCP received on WAN [ACK] 62 bytes
> From 194.76.144.6 / 80 (00:06:53:2b:d3:e0)
> To 65.42.x.x / 49632 (00:40:10:13:11:d8)
> 4
> 02/10/2004 15:11:28.512 TCP received on LAN [SYN] 62 bytes
> From 192.168.x.x / 3800 (00:00:39:e7:82:ad)
> To 194.76.144.6 / 80 (00:40:10:13:11:d8)
>
> Thanks
>
> Nick

Relevant Pages

  • Problem with Sonicwall XPRS SNY-ACK not being recieved
    ... our firewall can reach their Website. ... Client behind firewall sends a SYN ... packet to 194.76.144.6, ... It is a big customer. ...
    (comp.security.firewalls)
  • Re: IE6 Wont let me See Graphics
    ... As I found with my website, I was seeing my relative path images ... I use Computer Associates for my firewall and my ... turned off the Windows internal Firewall. ... It was blocking all Ads and all Popups. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: ISA 2000 and Frontpage publishing
    ... So you are a firewall client! ... Try to publish again to your website, and please post back all the messages ... > I thought ISA was both - ISA 2000 is the firewall on my network perimeter, ...
    (microsoft.public.isa)
  • Re: Blocking Port scans
    ... > Firewall Assessment for a CISCO PIX firewall. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... > Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
    (Pen-Test)
  • Re: Wait event "SQL*Net more data to client" in wait class "Network"
    ... connection on 10 hang for about 10 secondes. ... Is it a stateful firewall? ... the client and server (I have not had a chance to test Wireshark on 64 ... I'll try packet capture with my networking consultant. ...
    (comp.databases.oracle.server)