probleme with LVS-NAT and FIN ACK tcp flag

[<techp@xxxxxxxxxxx>]

Hello,

I have a problem with the end of tcp conections.

I use LVS (lvs-nat) box on fedora core 4 with lastest kernel (2.6) and
thow web server on fedora too.

When a user send FIN ACK to the LVS box the LVS send to user 'icmp 48:
tcp port http unreachable'.

The LVS  box don't send the FIN ACK to the real server too.

 

So both have actives conections stats pending.

 

With the 'ipvsadm  -Lcn' command I get lot of FIN_WAIT.

 

Anybody have an idea ?

 

Thx in advance

 

Laurent N.

 

PS : Sorry for my bad english.