On Fri, 25 Apr 2008, Thomas Pedoussaut wrote: > So the solution is to change the iptables rule from > -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport $VPORT > -j ACCEPT > to > -A RH-Firewall-1-INPUT -m tcp -p tcp --dport $VPORT -j ACCEPT
thanks. In retrospect (of course) it's obvious. You can't do stateful inspection of packets with LVS-DR Joe -- Joseph Mack NA3T EME(B,D), FM05lw North Carolina jmack (at) wm7d (dot) net - azimuthal equidistant map generator at http://www.wm7d.net/azproj.shtml Homepage http://www.austintek.com/ It's GNU/Linux! _______________________________________________ LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org Send requests to [EMAIL PROTECTED] or go to http://lists.graemef.net/mailman/listinfo/lvs-users