Re: 2.4.17 realserver not answering requests

["Abe Schwartz" <sloween@xxxxxxxxxxx>]

> On Wed, 6 Feb 2002, Abe Schwartz wrote:
> > >director# tcpdump -ln -i OUTDEV host CIP -vvv
> >
> > # tcpdump -ln -i eth0 host 10.0.0.211 and port 80 -vvv
> > Kernel filter, protocol ALL, datagram packet socket
> > tcpdump: listening on eth0
> > 09:48:05.181565 < 10.0.0.211.1542 > 192.168.0.190.www: S
> > 516842430:516842430(0) win 5840 <mss 1460> (DF) (ttl 46, id 47014)
> > 09:48:05.181741 > 10.0.0.211.1542 > 192.168.0.190.www: S
> > 516842430:516842430(0) win 5840 <mss 1460> (DF) (ttl 46, id 47014)
> > 09:48:05.258397 < 10.0.0.211.1542 > 192.168.0.190.www: .
>
>         By some reason the above ACK is not sent to the real server,
> do you have any firewall rules on the director? The RS receives
> only the first SYN and replies to it but no ACK is received.
>
> > 516842431:516842431(0) ack 531827344 win 5840 (DF) (ttl 46, id 47015)
> > 09:48:06.977440 < 10.0.0.211.1542 > 192.168.0.190.www: P 0:7(7) ack 1 
> win
> > 5840 (DF) (ttl 46, id 47016)
Based on the tcpdumps sent earlier today 
[http://www.in-addr.de/pipermail/lvs-users/2002-February/004717.html], is 
the above ACK not sent (e.g., does not leave the director) or does it appear 
that the ACK is sent by the director, but not recieved?
I'm trying to determine which boxs' (director or realservers) iptables 
directives (if any) are stopping the exchange from taking place. Any 
pointers would be appreciated.
Thanks.

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.