MOI and KAHRAMAA ( KM.QA ) site unreachable behind some firewalls

Many companies frequently face issue with the site MOI and  km.qa  -

problem and the solution

Problem

---------

It's an issue with TCP compliance with RFC 793 and RFC 1122. Most firewalls not enforcing it by default.

Solution.

--------

Enforce strict TCP compliance with RFC 793 and RFC 1122 –

Settings may vary depends on the brand and model of the firewall. Sonicwall settings are shown below.

Sonicwall settings

-----------------

Please do the setting as below.

Goto Menu

Firewall settings -> Flood Protection

On TCP settings check "Enforce strict TCP compliance with RFC 793 and RFC 1122"

See the pictures below.



For PALOALTO firewall , do the following settings

Palo alto