TCP (no connection) packets being denied - confused.

[kcaporaso]

I'm getting messages like so in my ASA logger and I'm trying to understand and fix what's causing the issue:

Deny TCP (no connection) from mail/443 to 76.87.212.14/1591 flags ACK on interface inside

This logger line is spit out when an outside client is trying to access their webmail over port 443 to the mail host.

They can log into the webmail application but then when data starts to stream back I start getting these messages and the end-client never sees the page finish loading and so no email is shown.

How do I allow these packets to pass back through??

TIA!

[kcaporaso]

Problem solved!

[hburgos]

What was the resolution?

[kcaporaso]

Actually, I still get the messages but the email client data passes back through and all is working fine. The real issue was that the mail server had a hiccup and once I restarted the mail server all was OK.