Package: uruk Tags: upstream
problem ------- some packets get blocked incorrectly: uruk-host ends tcp-session. iptables drops connection from state table. other end sends fin-ack to acknowledge end of session. since state table is empty, uruk blocks and logs this packet. suggested workaround -------------------- allow all FIN-ACKs, by adding: # first argument is the flags which we should examine, the second argument is the flags # which must be set --tcp-flags SYN,ACK,FIN,RST FIN,ACK nb -- The root cause is in the linux kernel, the suggestion is merely a workaround. See also http://serverfault.com/questions/309691/why-is-our-firewall-ubuntu-8-04-rejecting-the-final-packet-fin-ack-psh-wit Thanks Wessel Dankers for inspiring this bugreport. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
