Thanks Martijn,
On 11/02/2008, at 6:16 AM, Martijn Lievaart wrote:
Enabling conntrack_be_liberal seems to have solved the issue for me.
echo "1" > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_be_liberal
seems to work for my systems. No more INVALID packets.
Some of the netfilter firewall how-to guides I've found say that
ip_conntrack_tcp_be_liberal should never be set on a firewall. So I'm
still left wondering if I'm working around a bug and my firewall is
not as strict as it should be, or are these how-to's all wrong.
Regards,
JZ
-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
