Hello Pascal, Monday, January 29, 2007, 3:07:54 PM, you wrote: PH> This may be related to the thread "Dropped fin acks (iptables + lvs)" PH> above, as in both cases most affected packets seem to be FIN/ACK and PH> RST/ACK. I have not read the archives, I'll download and read them soon. Anyway, it seems that you are right, it misses only FIN packets... but it probably misses them in PREROUTING, as I have stated in another post in this thread. -- Fabio "Kurgan" Muzzi