[SOLVED] State timeouts and FIN/RST ACK

[senser]

I was just wondering if I should care about those (few, but not unusual) outgoing FIN/RST ACK's being blocked due to state timeouts? Is it save/nicer to add a rule to allow stateless ACK's to close a connection? Thx

[cmb]

It's a normal part of every stateful firewall's functionality, just something to ignore.
http://doc.pfsense.org/index.php/Logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection,_why%3F

Unless it happens at a very high rate relative to your total number of connections, in which case it could be indicative of a problem like asymmetric routing causing difficulties.

[senser]

Thx cmb!