On Mon, 8 Oct 2007, Krzysztof Oledzki wrote: > > It seems to me conntack is just right. > > So? This bug is in Linux IP stack, as it should not reopen this port or reopen > using a different SEQ, right? It seems I should go to a different ML. :| What is the exact kernel version of this machine? Do you have got any kernel patches which might touch the IP stack installed? Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html