Cedric Blancher wrote: > Do you use patches such as tcp-nopickup that could make an ACK packet > fall into INVALID state because not matched against any existing > conntrack entry ? How can I check? I installed iptables v1.2.8 with no patches so I don't think I ahve tcp-nopickup installed. Thanks, Jean-Christian Imbeault
