# Firewall - Strange behavior **URL:** \ **Category:** Firewall Rules\ **Created:** [17 November 2023 09:36 UTC](https://community.ipfire.org/t/firewall-strange-behavior/10599 "2023-11-17T09:36:58Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![jon](https://community.ipfire.org/user_avatar/community.ipfire.org/jon/32/15363_2.png) [@jon](https://community.ipfire.org/u/jon)\ **Post date:** [19 November 2023 19:03 UTC](https://community.ipfire.org/t/firewall-strange-behavior/10599/2 "2023-11-19T19:03:28Z")
You can read about DROP\_CTINVALID and DROP\_NEWNOTSYN here: > **[Firewall Options - The IPFire Wiki](https://wiki.ipfire.org/configuration/firewall/options)** and see this post: > [@DROP\_CT\_INVALID message since upgrading](https://community.ipfire.org/t/drop-ct-invalid-message-since-upgrading/7831/1): > > Hi! Since upgrading to core 167 today, I’m seeing many DROP\_CTINVALID messages on firewall log: Raw format: 11:47:15 IN=red0 OUT= MAC=00:0d:b9:47:66:e9:74:42:7f:4a:e0:27:08:00 SRC=81.3.27.54 DST=172.17.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=853 DPT=47344 WINDOW=0 RES=0x00 RST URGP=0 MARK=0x4000ca66 11:47:12 IN=red0 OUT= MAC=00:0d:b9:47:66:e9:74:42:7f:4a:e0:27:08:00 SRC=81.3.27.54 DST=172.17.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=853 DPT=4734… There are posts about DROP\_NEWNOTSYN also. **I get LOTS of those messages also**. I disabled both of these messages in with the top two **Firewall logging** settings: ![Screen Shot 2023-11-19 at 12.54.16 PM](https://community.ipfire.org/uploads/default/original/2X/8/8c214f587afbd836a7990be05e0935313b9e24a1.png) As for the disconnection issue, please look for other log entries at the time of the disconnection. Are there logs in the Border Router you can review also? --- _[View the full topic](https://community.ipfire.org/t/firewall-strange-behavior/10599)._