Thread: MS AD replication across firewall
View Single Post
  #3 (permalink)  
Old 2005-11-14
jrdld jrdld is offline
Junior Member
  
Join Date: 2005-11-11
Posts: 23
Rep Power: 0
jrdld has an average reputation (10+)
Default Re: MS AD replication across firewall
You can get packet out of state if the system trying to open a connection doesn't get any reply to its initial SYN packet. FW-1 expects to see a SYN-ACK coming back from the destination before the source sends another SYN.

This implies that the packets are not getting back to the firewall from the destination. Maybe it's a routing problem on the destination host or an intervening gateway, or maybe the destination is not listening on port 135 (epmap).

JR
Reply With Quote