I have already posted this in a different forum, but I have new information
that leads me to filtering. Catrina Luppi has been very helpful so far!

During the day, web traffic and email are very fast, however we cannot
connect to an ftp server or a newsgroup server (i.e. the Novell forums!)
After school as traffic lessens, we can begin to connect again. We thought
it was a routing issue and I have done dozens of captures, but I just now
found these filtered packets I cannot explain.

We have BM 38sp3. My workstation I'm trying to connect from is
172.16.12.25 and the Novell Forums I'm failing to connect to are 130.57.1.73

I issue these commands from an NCF file:
unload conlog.nlm
load conlog.nlm
Set Filter Debug=on
Set ip forward filter debug=0
Set TCP Forward Filter Debug=0
Set ICMP Forward Filter Debug=0
Set UDP Forward Filter Debug=0
Set ip Discard Filter Debug=1
Set TCP Discard Filter Debug=1
Set UDP Discard Filter Debug=1

and I got these packets captured:



************************************************** ***************************
INBOUND packet to "Discard"

Protocol Type=(TCP) Protocol Flag=(SYN ACK)

Source Address=(206.173.193.10) Destination Address=(172.16.10.156)

Source Port=(80) Destination Port=(1525)

Source TOS=(HTTP) Destination TOS=(Dynamic)

Source Interface=(1) Destination Interface=(2)

Source Circuit=(52347) Destination Circuit=(5321)

Source GroupID=(0) Destination GroupID=(0)





Discard filter rule from "Filters" list

Filter Protocol Type=(IP)

Source Interface Type=(BOARD) Destination Interface Type=(Any)

Source Address=(Any Address) Destination Address=(Any Address)

Source Interface Number=(1) Destination Interface Number=(0)

Source Port Range=(0-0) Destination Port Range=(0-0)

Source TOS=(Reserved) Destination TOS=(Reserved)

Source Group Name=(None) Destination Group Name=(None)

Source Group ID=(0) Destination Group ID=(0)

Source Remote System ID=(None) Destination Remote System ID=(None)

Source Circuit=(0) Destination Circuit=(0)

************************************************** ****************************





************************************************** ****************************

INBOUND packet to "Discard"

Protocol Type=(TCP) Protocol Flag=(SYN ACK)

Source Address=(207.46.254.126) Destination Address=(172.16.10.20)

Source Port=(80) Destination Port=(1591)

Source TOS=(HTTP) Destination TOS=(Dynamic)

Source Interface=(1) Destination Interface=(2)

Source Circuit=(52347) Destination Circuit=(5321)

Source GroupID=(0) Destination GroupID=(0)





Discard filter rule from "Filters" list

Filter Protocol Type=(IP)

Source Interface Type=(BOARD) Destination Interface Type=(Any)

Source Address=(Any Address) Destination Address=(Any Address)

Source Interface Number=(1) Destination Interface Number=(0)

Source Port Range=(0-0) Destination Port Range=(0-0)

Source TOS=(Reserved) Destination TOS=(Reserved)

Source Group Name=(None) Destination Group Name=(None)

Source Group ID=(0) Destination Group ID=(0)

Source Remote System ID=(None) Destination Remote System ID=(None)

Source Circuit=(0) Destination Circuit=(0)

************************************************** ****************************





Dynamic rule from "Exceptions" list

Protocol Type=(TCP)

Source Interface Type=(BOARD) Destination Interface Type=(BOARD)

Source Address=(130.57.1.73) Destination Address=(172.16.12.25)

Source Interface Number=(1) Destination Interface Number=(2)

Source Port Range=(119-119) Destination Port Range=(2270-2270)

Source TOS=(NNTP) Destination TOS=(Dynamic)

Source Group Name=(None) Destination Group Name=(None)

Source Group ID=(0) Destination Group ID=(0)

Source Remote System ID=(None) Destination Remote System ID=(None)

Source Circuit=(52347) Destination Circuit=(5321)

************************************************** ****************************





Dynamic rule from "Exceptions" list

Protocol Type=(TCP)

Source Interface Type=(BOARD) Destination Interface Type=(BOARD)

Source Address=(130.57.1.73) Destination Address=(172.16.12.25)

Source Interface Number=(1) Destination Interface Number=(2)

Source Port Range=(119-119) Destination Port Range=(2269-2269)

Source TOS=(NNTP) Destination TOS=(Dynamic)

Source Group Name=(None) Destination Group Name=(None)

Source Group ID=(0) Destination Group ID=(0)

Source Remote System ID=(None) Destination Remote System ID=(None)

Source Circuit=(52347) Destination Circuit=(5321)

************************************************** ****************************





Dynamic rule from "Exceptions" list

Protocol Type=(TCP)

Source Interface Type=(BOARD) Destination Interface Type=(BOARD)

Source Address=(130.57.1.73) Destination Address=(172.16.12.25)

Source Interface Number=(1) Destination Interface Number=(2)

Source Port Range=(119-119) Destination Port Range=(2231-2231)

Source TOS=(NNTP) Destination TOS=(Dynamic)

Source Group Name=(None) Destination Group Name=(None)

Source Group ID=(0) Destination Group ID=(0)

Source Remote System ID=(None) Destination Remote System ID=(None)

Source Circuit=(52347) Destination Circuit=(5321)

************************************************** ****************************





Dynamic rule from "Exceptions" list

Protocol Type=(TCP)

Source Interface Type=(BOARD) Destination Interface Type=(BOARD)

Source Address=(130.57.1.73) Destination Address=(172.16.12.25)

Source Interface Number=(1) Destination Interface Number=(2)

Source Port Range=(119-119) Destination Port Range=(2230-2230)

Source TOS=(NNTP) Destination TOS=(Dynamic)

Source Group Name=(None) Destination Group Name=(None)

Source Group ID=(0) Destination Group ID=(0)

Source Remote System ID=(None) Destination Remote System ID=(None)

Source Circuit=(52347) Destination Circuit=(5321)

************************************************** ****************************



What is a "dynamic rule" and how can I turn it off? I don't understand how
it can filter during the day, but not at night.

Also, in TCPCON, Statistics, IP, we have *millions" of outgoing discarded
datagrams-Local Errors. I'm assuming that's related to this? It keeps
increasing day and night.

Thanks for any help!

Matt