half close time outs on firewalls

[carl_townshend]

Hi all, we have a problem with a firewall, the client is sending us files from there server,they come from the web and get port forwarded to our server in the dmz, its comiing up connection completed but its not fullying working, im getting this

"client half close timeout!

would this be them closing the connection or our server in the dmz ?

[Yudong Wu]

It's hard to tell. Can you do a packet capture on both sides to see who sends TCP "FIN"? When one side sends FIN to close a TCP connection but its peer does not response, we will get "half close timeout"

[carl_townshend]

so should my side send a fin ack to complete the close ?

i am gathering the client side is timing out and so sends a fin, is this right ?

[Yudong Wu]

I am not sure what happened exactly until looking into a sniffer capture.