--- linux-2.2.14-0.9.9/net/ipv4/ip_masq.c.orig	Sun Mar 19 16:46:39 2000
+++ linux/net/ipv4/ip_masq.c	Sun Mar 19 19:40:11 2000
@@ -172,7 +172,7 @@
 struct masq_tcp_states_t masq_tcp_states [] = {
 /*	INPUT */
 /* 	  mNO, mES, mSS, mSR, mFW, mTW, mCL, mCW, mLA, mLI 	*/
-/*syn*/	{{mSR, mES, mES, mSR, mSR, mSR, mSR, mSR, mSR, mSR }},
+/*syn*/	{{mSR, mES, mSS, mSR, mSR, mSR, mSR, mSR, mSR, mSR }},
 /*fin*/	{{mCL, mCW, mSS, mTW, mTW, mTW, mCL, mCW, mLA, mLI }},
 /*ack*/	{{mCL, mES, mSS, mSR, mFW, mTW, mCL, mCW, mCL, mLI }},
 /*rst*/ {{mCL, mCL, mCL, mSR, mCL, mCL, mCL, mCL, mLA, mLI }},
@@ -181,7 +181,7 @@
 /* 	  mNO, mES, mSS, mSR, mFW, mTW, mCL, mCW, mLA, mLI 	*/
 /*syn*/	{{mSS, mES, mSS, mSR, mSS, mSS, mSS, mSS, mSS, mLI }},
 /*fin*/	{{mTW, mFW, mSS, mTW, mFW, mTW, mCL, mTW, mLA, mLI }},
-/*ack*/	{{mES, mES, mSS, mES, mFW, mTW, mCL, mCW, mLA, mES }},
+/*ack*/	{{mES, mES, mES, mES, mFW, mTW, mCL, mCW, mLA, mES }},
 /*rst*/ {{mCL, mCL, mSS, mCL, mCL, mTW, mCL, mCL, mCL, mCL }},
 
 #ifdef CONFIG_IP_MASQUERADE_VS
@@ -2441,6 +2441,11 @@
 
                 return 1;
  	}
+#ifdef CONFIG_IP_MASQUERADE_VS
+	if (svc) {
+		return -1;
+	}
+#endif
 
  	/* sorry, all this trouble for a no-hit :) */
  	return 0;