Re: [lvs-users] Iptables find invalid packets

To: " users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] Iptables find invalid packets
From: Joseph Mack NA3T <jmack@xxxxxxxx>
Date: Mon, 21 Jul 2008 06:07:40 -0700 (PDT)
On Mon, 21 Jul 2008, Dimitri GOURDON wrote:

> Hi all,
> I've setup LVS on a box using Keepalived (and Iptables) to load balance
> traffic between 2 web servers. I have a problem :
> A lot of TCP packets with FIN or RST flags (all I think) are dropped by
> Iptables as state INVALID. The consequence is that I have a lot of
> connection in FIN_WAIT state (shown by netstat) on the 2 web servers...

do you get the problem without the iptables rules?


Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at
Homepage It's GNU/Linux!

<Prev in Thread] Current Thread [Next in Thread>