On Mon, 2008-01-28 at 10:53 +0100, Jan Engelhardt wrote:
> On Jan 27 2008 22:14, Zan Lynx wrote:
> >
> > Please CC me on any replies as I am not subscribed.
> >
> > I was downloading a new Google Earth when I noticed a LOT of
> > max-size dropped packets in my firewall log. I only allow
> > RELATED,ESTABLISHED sessions into my firewall.
> >
> > tcpdump showed that every time Google sent a packet to satisfy the
> > missing data identified by SACK, that packet was rejected. So it
> > must have been missing the ESTABLISHED rule.
>
> You can check the connection state with `conntrack -L`, or in
> /proc/net/{ip,nf}_conntrack. What does it read?
I am sorry. The download completed and I have not yet had time to
reproduce it. Perhaps I can get something tonight.
--
Zan Lynx <zlynx@xxxxxxx>
Attachment:
signature.asc
Description: This is a digitally signed message part
