Ack/Fin packets dropped.

[Patrick Schaaf]

> >> The explanation is simple : TCP timeout at the end of a connexion, ie after
> >> the 1st FIN/ACK paquet, are very short comparatively to the 5 days timeout
> >> during the connexion (30 seconds iirc), ie after the 3 way hand shake.
> >
> >It's 10 seconds, but anyway - 10 seconds are a _long_ time for short-lived
> >http conncetions.
> 
> Perhaps - but obviously not long enough.  I have dozens of those log entries
> every day on my very low-traffic home firewall.

Do they demonstrably break functionality, or just make you nervous?

regards
  Patrick