Firewall drop icmp error type 3 code 4 "ICMP error does not match an existing connection"

Kosin_Usuwanthi — Mon, 28 Dec 2020 06:47:04 GMT

Now I can fixed by follow sk119312.

But not sure this traffic should be allow by "Accept stateful ICMP Errors" or uncheck "drop out of state ICMP packet" on global properties or not ?

Thank you

Re: Firewall drop icmp error type 3 code 4 "ICMP error does not match an existing connection&qu

_Val_ — Mon, 28 Dec 2020 09:02:46 GMT

Not related. the log is about out of state ICMP for asymmetric routing.