D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: bgorzelsky on September 21, 2010, 07:53:14 AM

Title: tcp_seqno_too_high
Post by: bgorzelsky on September 21, 2010, 07:53:14 AM

Hi all, I am experiencing an odd issue. I am running a DFL-210, with a Static IP address. My website and email server is hosted offsite. For 2 months I have had no problems, but the end of last week I was no longer able to reach my website or email server. i get the following error:

(http://www.acrpkids.org/support/error.png)

It only happens when I try to reach this specific server. But what makes it even more odd is, that when I change my Static IP to a DHCP IP, I can reach it.

I spoke with BCS and got nowhere, I am hoping someone else out there has seen this and has a suggestion.

Thanks

Title: Re: tcp_seqno_too_high
Post by: Fatman on September 21, 2010, 09:41:24 AM

That is only a warning, it is not your actual problem.

Does changing your IP period fix the problem, or only when you don't have a static address, or only when you don't have THAT static address?

Take a packet capture using the serial or SSH CLI and a firmware 2.26 or greater.  Take one on the WAN and one on the LAN at the same time, we may want capture filters to protect the buffer if we have a heavy load.

pcapdump is the relevant command from the CLI, you will then have to SCP the caps off the firewall.

Take one working, and one not working.

Double points if you can get me a syslog of the time of these tests.

PM me a way to get your caps, and I will take a look at them.

Title: Re: tcp_seqno_too_high
Post by: Mct on September 30, 2010, 01:45:19 AM

I have the same problem.
I do not know how to fix it.  :-\

(http://img269.imageshack.us/img269/6688/sinttuloop.jpg)

Title: Re: tcp_seqno_too_high
Post by: Mct on October 01, 2010, 12:30:24 AM

I fix it!

My ISP has blocked the smtp port (25).