On Jan 27 2008 22:14, Zan Lynx wrote:
>
> Please CC me on any replies as I am not subscribed.
>
> I was downloading a new Google Earth when I noticed a LOT of
> max-size dropped packets in my firewall log. I only allow
> RELATED,ESTABLISHED sessions into my firewall.
>
> tcpdump showed that every time Google sent a packet to satisfy the
> missing data identified by SACK, that packet was rejected. So it
> must have been missing the ESTABLISHED rule.
You can check the connection state with `conntrack -L`, or in
/proc/net/{ip,nf}_conntrack. What does it read?
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
