"Invalid" Connection State Blocking OSPF

Is anyone else seeing the Connection state “Invalid” catching OSPF traffic?

I enable this rule

add action=drop chain=input connection-state=invalid log=yes

Here is the log entries it is catching (that in my opinion it shouldn’t)

11:37:43 firewall,info input: in:vlan600 out:(none), src-mac d4:ca:6d:74:29:14, proto 89, 10.225.0.54->224.0.0.5, len 228

Any ideas? what would cause OSPF traffic to be considered invalid?

So it was firmware version.

I was running 6.37.1.

Upgraded to 6.38 and it fixed the issue.

This may be good for people to know!