Re: [lvs-users] LVS DR dropping the FIN packets

[Joseph Mack NA3T <jmack@xxxxxxxx>]

On Fri, 25 Apr 2008, Thomas Pedoussaut wrote:

> So the solution is to change the iptables rule from
> -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport $VPORT
> -j ACCEPT
> to
> -A RH-Firewall-1-INPUT -m tcp -p tcp --dport $VPORT -j ACCEPT


thanks. In retrospect (of course) it's obvious. You can't do 
stateful inspection of packets with LVS-DR

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!