Re: state table not working

["Daniel Wittenberg" <daniel-wittenberg@starken.com>]

tcpdump I won't be able to get until it fails again, but it's 
2.4.22-1.2188.nptl (did it with kernel-2.4.22-1.2174.nptl too).

The full ruleset is almost 200 lines, and will take awhile for me to sanitize
it, but will work on it (not a static script, dynamically generated).
 
# lsmod
Module                  Size  Used by    Not tainted
iptable_filter          2444   1  (autoclean)
ipt_state               1080   8
ipt_REJECT              4248   2
ipt_REDIRECT            1400   0  (unused)
ipt_MASQUERADE          2200   2
ipt_mark                 984   0  (unused)
ipt_LOG                 4248  62
ipt_limit               1560  28
ip_nat_ftp              3728   0  (unused)
iptable_nat            21848   2  [ipt_REDIRECT ipt_MASQUERADE ip_nat_ftp]
ip_tables              15136  11  [iptable_filter ipt_state ipt_REJECT
ipt_REDIRECT ipt_MASQUERADE ipt_mark ipt_LOG ipt_limit iptable_nat]
ip_conntrack_ftp        4944   1
ip_conntrack           28552   3  [ipt_state ipt_REDIRECT ipt_MASQUERADE
ip_nat_ftp iptable_nat ip_conntrack_ftp]
natsemi                19232   3
keybdev                 2656   0  (unused)
mousedev                5268   0  (unused)
hid                    23908   0  (unused)
input                   5888   0  [keybdev mousedev hid]
usb-uhci               26124   0  (unused)
usbcore                78752   1  [hid usb-uhci]
ext3                   71620   2
jbd                    51276   2  [ext3]



Quoting Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>:

> 
> Please post your exact kernel version number, loaded in kernel modules,
> your complete ruleset *and* a real tcpdump output.
> 
> Server SYN/ACK response does not reach the client: that's all one can say.
> 
> Best regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary
> 
>