On 12/12/05, ryanp at hhsys dot org <ryanp at hhsys dot org> wrote:
> These are allowed via
> TCP 10.246.9.0/24:* to 10.249.0.1:1500
> but its still being blocked, I even said allow fragmented packets. still
> being blocked. block private network is unchecked, whats going on?
It's getting to rule 11:
@11 block in log quick proto tcp from any to any
so it's not in the state table, and it's not the initiation of a new
TCP connection (that would then enter the state table for subsequent
traffic). Does the particular application work? Seems like it would
either be this:
or a really broken application.