Not sure if this should be reported as a bug or not, so please bear with me.
A "scrub on $ext_if reassemble tcp" will deny some SuSE clients access to some
Microsoft IIS webservers. This appears to be an issue with SuSE's latest
kernel (2.4.20-100) only.
I'm not sure it it's the IIS servers themselves or some other strange things
happening, but the following sites (using IIS, according to netcraft.com)
cannot be browsed :
www.zmag.org
www.svd.se
www.dustin.se
www.xp-data.com
www.itpower.se
While the following works
www.mentice.com
The Windows, Mac and OpenBSD clients behind the firewall can access those
sites just fine.
If I use "scrub on $ext_if", then there is no problems with SuSE clients.
I rebuilt kernel/userland yesterday using -current.
/Sigfred