András Tarsoly wrote:
HI Tom,On Wed, Mar 19, 2008 at 9:36 PM, Tom Eastep <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:Please try this on the firewall: echo 1 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_be_liberalThis been set in init already. I've double checked and this is active already.
Have you looked at the outgoing packets on vlan100 using the -vv tcpdump option to be sure that the checksums are correct?
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
