[infrared013]

I am hoping someone might be able to shed some light on an issue one of my customers recently having. During an FTP session the connection drops randomly and in the logs I see a rejected packet where the source port ha changed to something very bizarre such as edonkey_4661, shadyshell, subseven-g etc etc....we disabled the "prevent known port checking" in smart defense however the problem still continues.

If anyone has any information it would be greatly appreciated.

Thanks