On Monday 21 of July 2008, Dimitri GOURDON wrote: > Hi all, > > I've setup LVS on a box using Keepalived (and Iptables) to load balance > traffic between 2 web servers. I have a problem : > > A lot of TCP packets with FIN or RST flags (all I think) from clients > are dropped by Iptables as state INVALID. The consequence is that I have > a lot of connection in FIN_WAIT state (shown by netstat) on the 2 web > servers... I have similar problem, and asked about it here. I was told to try newer kernel (I run debian stable - 2.6.18). However I didn't upgrade yet, but If you run the same kernel as I do and upgrade would help you I'd like to here about that. -- Regards Vladislav Kurz -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html