Hi all, I ave tcp paquet dropped by FW1 NG with reason "TCP out of state". My configuration is: 2 machine firewalls, firts the internal FW on a linux box ( RHAS4.3) with iptable 1.2.8. On this machine I do NAT for one protocol ( imaps, port 993 ). Followed by an external FW an SUN ULTRA5 with Checkpoint NG. On this last machine I ave the TCP out of state dropped packets. This occur with higher traffic, more than 60 natted connections. Where is the problem ? internal ressources memory speed ? Thanks JLM - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html