[FW1] Reason: violated unidirectional connection

["Milburn, Rich" <milburnr@lamadd.navy.mil>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


I get frequent entries in my log with the following in the Info column:
reason: violated unidirectional connection

What is that??

It is dropped by Rule 0, and they typically come from places that look like
places one might surf to, but they are on various high ports - like 3128,
etc.  There usually are blocks of them, on the same port from the same
place, but they don't often correspond to any surfing  I can see from the
logs.  Anyone know what might cause these??

Rich



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================