[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Problems with state syncronisation



On Mon, Feb 14, 2005 at 10:20:44AM +0100, Andrea Mistrali wrote:
> Those lines are always relative to broadcast addresses.
> 
> What can it be?
If a packet reaches both firewalls, they will both create state; when
they each recieve the state creation message from the other, the state
already exists and the insertion fails.
You can ignore the messages, or modify your ruleset so that broadcast
packets don't create synchronised states.