Help with invalid packets.

[Micheal Wolfskill <tdgh2323@xxxxxxxxxxx>]

I have this rule:
 
 $IPT  -A INPUT -i ${PUB_IF} -m state --state INVALID -j DROP
 
 The problem is its matching legitimate packets of visitors (including me) that navigate my site... As i can see in the logs.
 

 Its not affecting the normal viewing of my site.. but I wish to know 
why it is matching these packets as Iam sure it should not. 
 
 Here is the log entry in syslogd
 
 
 Mar 16 15:29:36  kernel: Invalid  IN =eth0 OUT=
 MAC=00:16:3e:44:bf:02:00:11:92:8b:ff:c4:08:00 SRC=xxx.xxxx.xxxx.xxxxx DST=xxxx.xxxx.xxxx.xxxx LEN=40
 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=6367 DPT=80 WINDOW=0 RES=0x00 RST URGP=0

Thanks

Mike 		 	   		  --
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html