Christopher M. Iarocci said:
> That should have no effect. He's not going through the WAN. This is a
> packet from LAN to DMZ. Wan rules should not touch it. I can only say,
> I see this same exact behavior on my box, but do not notice any problems
> it causes. Even though the packets show as blocked, they don't seem to
> really be blocked.
Could be packets that fail ipfilter's state table check (ack/seq out of
window, flags, firewall was rebooted while TCP connection was established,