TCP Idle Timeout Confusion
-
I have a basic 2 interface setup (OPT1 and OPT2) where I have a server connected to each interface. The application I am running will establish a connection between the two servers on port 1515 and that connection can stay in ESTABLISHED state for many minutes with 0 packets being transmitted between the two servers. I would like for pfSense to reset this connection if it is IDLE (0 packets being sent) for more than 300 seconds. On the Firewall rules for both OPT1 and OPT2, I set the "State timeout" to 300, but even after 300 seconds of being IDLE, the connection does not get reset.
Is this the correct timeout to use to disconnect IDLE sessions?
-
After some further testing, I discovered that the Timeout is actually working, in that it blocks further traffic on the connection after 300 seconds has passed. However, there is no FIN or RSET sent when this happens, I just see TCP Retransmission attempts for the next packet that is sent after the connection is blocked.
Is there any way to get pfSense to send a TCP RSET after the 300 second timeout occurs??