Dmz configure error

[admin_2]

I have pix 515R with inside, outside and dmz setup.

I get this error: Deny tcp connection spoof from "inside address" to "dmz address"

What does this mean?

[edadios]

This is what it means.

A connection exists and then a new connection comes along and a connection

lookup matches except for interface information. So the addresses and ports are the same yet there are 2 connections like this across different interfaces.

Cause

Maybe some route loop, overlapping addressing, or spoofed packet.

Regards,