Problem with FIAIF_INVALID

[Steven W. Orr]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am trying to fetch a PGP key from a keyserver. I see this in syslog:

Jul 27 22:37:38 saturn kernel: [FIAIF_INVALID]:IN=eth0 OUT=
MAC=00:13:d4:d1:b7:7c:00:12:44:91:f0:01:08:00 SRC=208.72.157.55
DST=207.172.210.41 LEN=152 TOS=0x00 PREC=0x00 TTL=49 ID=12430 DF PROTO=TCP
SPT=11371 DPT=54770 WINDOW=54 RES=0x00 ACK PSH FIN URGP=0

In my zone.ext I have

OUTPUT[1]="ACCEPT tcp pgpkeyserver 0.0.0.0/0=>0.0.0.0/0"

and in /etc/services I have

pgpkeyserver    11371/tcp       hkp             # PGP/GPG public keyserver

Why is this INVALID?

Also, if I take the firewall down, the error does not occur.


- --
Time flies like the wind. Fruit flies like a banana. Stranger things have  .0.
happened but none stranger than this. Does your driver's license say Organ ..0
Donor?Black holes are where God divided by zero. Listen to me! We are all- 000
individuals! What if this weren't a hypothetical question?
steveo at syslang.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkpuaIgACgkQRIVy4fC+NyRoWgCfTvWIC/LJrLnomFUbmraQwk9g
ivkAoIS+uT7BWFXEXkIZM2FKCWo6tw6p
=5k+v
-----END PGP SIGNATURE-----