Re: Iptables find invalid packets

[Vladislav Kurz <vladislav.kurz@xxxxxxxxxxx>]

On Monday 21 of July 2008, Dimitri GOURDON wrote:
> Hi all,
>
> I've setup LVS on a box using Keepalived (and Iptables) to load balance
> traffic between 2 web servers. I have a problem :
>
> A lot of TCP packets with FIN or RST flags (all I think) from clients
> are dropped by Iptables as state INVALID. The consequence is that I have
> a lot of connection in FIN_WAIT state (shown by netstat) on the 2 web
> servers...

I have similar problem, and asked about it here. I was told to try newer 
kernel (I run debian stable - 2.6.18). However I didn't upgrade yet, but If 
you run the same kernel as I do and upgrade would help you I'd like to here 
about that.

-- 
Regards
        Vladislav Kurz
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html