I'm investigating my FC6 to home problem and it looks as if my router may be blocking some of the traffic, trouble is I don't know what the message means. The router log is saying:-
FIREWALL fast tcp seqnr check (1 of 2): Protocol: TCP Src ip: 192.168.1.1 Src port: 22 Dst ip: 193.128.168.194 Dst port: 51097
Does anyone have a clue what that indicates? The destination is certainly the work system (193.128.168.194).
Chris
It looks like the packet is being split into 2
(1 of 2)
And maybe some of the router/firewalls cannot handle it. Maybe you should put the MTU back to the standard 1432 and try again.
But the good news is that the SSH packet is getting from your work machine, to your home machine, and back out again.
Maybe you have a setting on your router to allow ANY packets from the inside out? If you enable this then does it work? Can you get your web server to work yet either?
Regards
Keith
-----Original Message----- From: main-bounces@lists.alug.org.uk [mailto:main-bounces@lists.alug.org.uk] On Behalf Of Eur Ing Chris Green Sent: 15 March 2007 21:47 To: main@lists.alug.org.uk Subject: [ALUG] FC6 networking problem, a clue at last
I'm investigating my FC6 to home problem and it looks as if my router may be blocking some of the traffic, trouble is I don't know what the message means. The router log is saying:-
FIREWALL fast tcp seqnr check (1 of 2): Protocol: TCP Src ip: 192.168.1.1 Src port: 22 Dst ip: 193.128.168.194 Dst port: 51097
Does anyone have a clue what that indicates? The destination is certainly the work system (193.128.168.194).
-- Chris Green
_______________________________________________ main@lists.alug.org.uk http://www.alug.org.uk/ http://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!
On Thu, Mar 15, 2007 at 09:47:18PM +0000, Eur Ing Chris Green wrote:
I'm investigating my FC6 to home problem and it looks as if my router may be blocking some of the traffic, trouble is I don't know what the message means. The router log is saying:-
FIREWALL fast tcp seqnr check (1 of 2): Protocol: TCP Src ip: 192.168.1.1 Src port: 22 Dst ip: 193.128.168.194 Dst port: 51097Does anyone have a clue what that indicates? The destination is certainly the work system (193.128.168.194).
Well, I have fixed the problem by disabling one of the checks that my router/firewall does at home.
It used to do 'firewall config tcpchecks=fast', I have changed it to 'firewall config tcpchecks=none' and now eveything works from the FC6 system.
I *think* that my firewall is checking the sequence numbers of outgoing TCP packets and, for some reason, the ones from the FC6 system are out of sequence. I don't think disabling this check will influence security to a huge extent.
-
Eur Ing Chris Green -
keith.jamieson＠bt.com